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Documentation Conventions 



Typeface Conventions 



Bold 

Italics 

UPPERCASE 
ITALICS UPPERCASE 

Letter Gothic 
Anal, 8 point 



Indicates a button, menu selection, tab, dialog box 
title, or prompt on a dialog box. 

Indicates text to be entered into an entry field, 
selections from drop-down lists and dynamic vari- 
ables. 

Indicates the name of a share. 
Indicates a filename. 

Represents KiXtart script and batch file code. 

Represents an example used to illustrate a topic. 

Indicates the start of a process with a sequence of 
steps. 



Keyboard Conventions 



F1 



F2 



Press the F1 key to receive context-sensitive help 
regarding the currently selected dialog. 

Press the F2 key from any entry to allow the selec- 
tion of Dynamic Variables from the Dynamic Vari- 
ables list. 
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Other Conventions 

9x 
NTx 



x: 




Represents the collection of operating systems 
including Windows 95, Windows 98, and Windows 
Me. 

Represents the collection of operating systems 
including Windows NT, Windows 2000, Windows 
2003 and Windows XR 

Represents a drive on the computer, most often this 
is the system drive. 

Press this button to locate the resource required by 
the entry. 

Special notes providing information that is 
related to the specific topic. 



Special tips that provide alternative ways to 
accomplish tasks and useful pieces of advice. 



ScriptLogic 

Contacting ScriptLogic 

ScriptLogic may be contacted about any questions, problems or concerns 
you might have at: 

fiD ScriptLogic Corporation 

6000 Broken Sound Parkway NW 
Boca Raton, Florida 33487-2742 

S 561.886.2400 Sales and General Inquiries 
® 561.886.2450 Technical Support 
i 561.886.2499 Fax 
^ www.scriptloaic.com 



ScriptLogic on tlie Web 

ScriptLogic can be found on the web at www.scriptloqlc.com . Our web site 
offers customers a variety of information: 

• Download product updates, patches and/or fully functional 45-day 
evaluation products. 

• Locate product information and technical details. 

• Find out about Product Pricing. 

• Search the Knowledge Base for Technical Notes (Teknotes) containing 
an extensive collection of technical articles, troubleshooting tips and 
white papers. 

• Search Frequently Asked Questions, for the answers to the most 
common non-technical issues. 

• Contribute or download Custom Scripts. 

• Participate in Discussion Forums to discuss problems or ideas with 
other users and ScriptLogic representatives. 



Documentation Conventions 
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letroductiom to ScriptLogic 



Welcome to ScriptLogic 

Having trouble managing a tangled web of client logon scripts? Wasting time 
visiting computers all over your organization? Do you want to easily maintain 
consistent desktops for all clients? Well, sit down, relax, and put your feet 
up! Welcome to the world of ScriptLogic!! 

ScriptLogic provides an alternative to the mundane task of logon scripting as 
well as a centralized environment to work from. Rather than maintaining 
many logon scripting files, use a single familiar graphical interface to main- 
tain all of your client configurations. Updates are a snap. No more wasted 
time (and worn out shoes) running to every workstation. Perform system 
configurations for users, no matter what city, state, or country they log in 
from. Save time and mqney with ScriptLogic!! 



What is ScriptLogic? 

ScriptLogic introduces a simple graphical interface (GUI) that automates 

client network logons and computer configurations. It maintains all users' 
logon configurations In a single location and In an organized fashion. The 
ScriptLogic Manager maintains configurations for mapping network drives, 
printers, search paths, environment variables, security policies, desktop 
shortcuts, registry settings, operating system service pack distribution and 
more. Not only are all of these configurations available, but they can be set 
to execute for specific groups of computers, operating systems and user 
types using ScriptLogic's Validation Logic. Using custom scripts, these 
settings can be customized to meet specific network requirements. They can 
also add further functionality to ScriptLogic. Custom scripts are written using 
KiXtart, an enhanced scripting language and processing engine. 

Centralizing network administration details greatly reduces the time spent 
configuring new computers. It saves the administrator from running to each 
and every computer to modify settings. Using ScriptLogic, users will not 
have any interruption of work. Administrators will no longer have to modify or 
maintain possibly hundreds of scripts each time a change is needed. In- 
stead, the change is made in one place, the ScriptLogic Manager. All 
changes made in the manager are distributed to each user the next time 
they log on to the network. The ScriptLogic IVianager does it all!! 

After working with this logon scripting solution, you'll wonder how you ever 
got along without it! 
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Getting Started With ScriptLogic 



ScriptLogic is an application that is executed during the logon process as a 
user logs on to the network. There are a number of tasks that occur during 
the logon process. The user first enters a user name and password. This 
information is sent to the authenticating domain controller for validation. 
Once the user's request is granted, the following tasks occur in the specified 
order: 

• User profile is loaded. 

• System policies are applied. 

• Logon script is executed. This is the starting point for ScriptLogic 
configurations. 

Network Logon Process 



Logon Script 
Processing 



PoSides 



Ussr Profile 
Settings 




User Profiles 

The first task to occur when a user successfully logs on to the network is the 
loading of the user profile. 

What are User Profiles 

A user profile is a collection of settings that define the user's environment. 
This includes operating system environment settings, system colors, mouse 
settings, window settings and more. Using profiles enable a computer to 
have multiple users log on to the same computer while preserving each 
user's settings. 
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Windows NTx operating systems, by default, create a user profile for eacli 
person that uses tlie computer. Windows 9x, by default, has a single user 
profile that is shared by all users of the computer. You can enable individual 
profiles using the Users applet found in the Control Panel. 

There are three types of user profiles that can be implemented in a network 
setting. They are local, roaming and mandatory. By default, local profiles are 
kept on the hard drive of the local computer. Roaming and mandatory 
profiles are profiles that are stored on a network server. 

A roaming profile is used to allow users to roam from one computer to 
another while maintaining a common look and feel of the desktop. To 
accomplish this, the roaming profiles feature maintains two copies of the 
profile, a local copy of the user settings (profile) and a copy that is stored on 
the network. At logon, the user's profile is copied from the network to the 
local drive. Any changes to the profile during this session on the workstation 
are made to the local copy of the profile. Each time the user logs off the 
network, the network copy of the profile is updated with the changes that 
were made to the local copy of the profile. 

A mandatory profile is the same as a roaming profile with the exception that 
any changes to the local profile are not saved back to the network. There- 
fore, they will not be available for the user for his next session. This enables 
the organization maintaining the computer to have full control over the 
operating system settings on each computer. 

Drawbacks of Profiles 

There are several drawbacks of roaming and/or mandatory profiles. They 
include overhead, performance, synchronization and cross-platform compat- 
ibility issues. 

Over time, profiles grow in size. As profiles approach 5, 10 or even 20Mb in 
size, they tend to slow down the overall logon process. Overall network 
performance also degrades when there are a lot of users, each pulling down 
a 10Mb profile at the same time. For instance, employees usually arrive to 
work and log on to the network at approximately the same time in the 
morning. The user's profiles will be downloaded at approximately the same 
time. This could really slow down the network. For users that log on to the 
network via dial-up networking, roaming and mandatory profiles of a large 
size become unusable. 

Often the locally stored profile becomes out of synch with the copy of the 
profile on the server. In this situation, the user is questioned as to which copy 
they would like to keep. More often than not, the user chooses the wrong 
one. 



Chapter 1 - introduction to ScriptLogic 13 

Roaming profiles will work when users log onto computers with different 
operating systems but there may be some differences that might confuse the 
user. Because of this, using profiles in an environment with mixed operating 
systems can become a problem. 

A better solution 

ScriptLogic provides users with the ability to log on to any computer; how- 
ever, it does not have the drawbacks of roaming profiles. This is due to its 
unique approach to managing user profiles. Instead of copying the user's 
profile to and from the network, ScriptLogic simply manipulates the user's 
local profile during the logon process. This is done by combining the admin- 
istrative template settings defined in the ScriptLogic Manager with the user's 
domain account information. The combined settings are then applied to the 
locally stored user profile. 



System Policies 

After the user's profile has been loaded, system policies are applied to the 
user's environment. 

System Policies are a set of rules designated to a specific user, group of 
users or computer that control the user's ability to change the appearance of 
the desktop, control panel restrictions, shell restrictions and others. These 
policies are modified on an NT 4 domain using the Microsoft Policy Editor 
(poledit.exe), or through Group Policy Objects (GPOs) in a Windows 2000 
Active Directory environment. 

ScriptLogic has the built-in ability to manage System Policies. This feature 
can be used either independently or in conjunction with Microsoft's policy 
settings. No longer does the Administrator have to iearn a separate utility. 
Using the easy to use ScriptLogic environment, these policies can be 
configured and maintained. ScriptLogic can maintain policy settings for the 
Active Desktop, Computer, Windows Explorer, Internet Explorer, Network 
and System settings and MS DOS application capabilities. The policies are 
validated using ScriptLogic validation logic and are applied to the client 
machine during the logon process. ScriptLogic's system policies are avail- 
able for all Windows operating systems. 
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Logon Script Processing 

After the system policies are set, the user's logon script is processed. 

A logon script is a batch file (.BAT) or command file (.CMD) that executes 
when a user authenticates to the network. Logon scripts contain startup tasks 
for users. Mapping network drives, configuring environment variables, and 
network printer configuration, among other things are all tasks that a logon 
script can establish as part of the user's network environment. 

Due to the limited functionality of batch and command files (the inability to 
detect group membership), multiple batch files can be used to manage more 
complex resource mappings within the organization. The use of multiple 
batch files can become cumbersome. 

Another technique that can be used to manage more complex resource 
mappings is the use of custom scripting. Logon scripts can be written in any 
of several scripting languages such as KiXtart, VBscript, Windows Script 
Host, or Perl to name a few. These scripting languages offer extended 
benefits over batch file commands and allow for more complex logon 
scripting to occur. The problem with directly using any of these languages is 
that it requires the administrator to first learn the language in order to use it. 

ScriptLogic provides the best solution to managing user environments and 
logon scripts. The ScriptLogic application executes during the logon process 
every time a user authenticates to the network (assuming the user's logon 
script is set to SLOGIC). The SLOGIC batch file performs a few initial 
system checks and then starts the ScriptLogic application to configure the 
user's environment. Once the user's initial environment is set up, ScriptLogic 
can extend further to configure the Operating System, User Interface and 
Installed applications. This is done based on the current user, the operating 
system and the network connection method (i.e. LAN or dial-up). 

ScriptLogic is based on KiXtart, a powerful scripting language. KiXtart is a 
logon scripting language and enhanced batch file language system for 
Microsoft operating systems. It supports Microsoft operating systems from 
Windows 95 and above. ScriptLogic updates a KiXtart script as it is config- 
ured within the manager. Using ScriptLogic the network administrator does 
not have to manage logon scripts, leam a riew scripting language or worry 
about writing and debugging custom scripts. ScriptLogic does it all in a 
simple to use interface and in a much shorter timeframe. 
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ScriptLogic's Logon Script Functionality 

Let's categorize ScriptLogic's logon script functionality into three (3) catego- 
ries: Networl< Environment, User Environment, and Computer Environment 
settings. Using settings of each of these three categories, ScriptLogic 
customizes each user's working environment. 

Logon Script Processing 



Network 
Erp/ironment 



User 
Enwfronrr^nt 



Computer 
Environmem 




A user's Network Environment settings may consist of drive mappings, 
printer redirections, Internet settings, and MAPI profile settings. The User 
Environment consists of settings that affect the specific user logging on to 
the client workstation. These settings consist of security policies, launching 
of applications on startup, shortcuts on the desktop, Microsoft Office folder 
redirections as well as Windows folder redirections and Outlook client 
settings. The Computer Environment are settings that affect the worksta- 
tion the user logs on from regardless of who the user is. This consists of 
settings such as service pack updates, registry settings and legal notices. 

Once the ScriptLogic logon script is executed, the client's working environ- 
ment is established. They now have their own customized configurations 
including familiar mapped drives, search paths, and others no matter what 
workstation they log on from. They can get right to work; more importantly, 
without interrupting the Network Administrator from more pressing issues. 



> 
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Installing ScriptLogic 




Before You Begin 



Installing ScriptLogic is a sinnple process, however, it might be a little 
unnerving for some. Installing software to a domain controller is an issue that 
should never be taken lightly, but with ScriptLogic there is no cause for 
concern. 

Installing ScriptLogic poses no threat to cun^ent users on the network. In fact, 
ScriptLogic is not utilized by any user unless you manually assign 
ScriptLogic's logon script to your user's account 

Following the install process, there is no need to reboot your server. All 
ScriptLogic configurations are done at the time of install. Users logged onto 
the network will not be disturbed by this installation. 

Prior to installing any software, it is a good idea to perform a full backup of 
your system. If you do not have a backup at this time, please initiate one 

prior to installing this software. 

There are several pieces of information that must be known before installing 
ScriptLogic. The following checklist will help you identify this information to 
ensure a smooth installation. 
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Does your hardware meet the recommended system requirements? 

ScriptLogic is fully compatible with Microsoft Windows Operating Systems 
including 9x, Me, NT, 2000, XP and 2003 server. It is also compatible with 
Microsoft Terminal Server, Back Office, Back Office Small Business Server, 
and Citrix MetaFrameA/VinFrame. 

The following list represents ScriptLogic's Recommended Server and Client 
hardware requirements. 

• Minimum Server Requirements 

Operating System: Windows NT 4.0 Server 
Disk Space: * 
Processor Speed: • * 
Memory: * 

* The minimum requirement for installing the operating system is sufficient to install and run 
ScriptLogic, 

• Minimum Client Requirements 



Operating System: 
Processor Speed: 
Memory: 



Windows 95, Windows NT 4.0 
Pentium !l, 233 MHz 
32 MB of RAM 



Where should ScriptLogic be installed? 



ScriptLogic is designed to be installed on any Domain Controller on the 
network. The Domain Controller that the program is installed on is referred to 
as the Operations Master. 
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j Two special user accounts must be avaUable before the install is 
started. 

The ScriptLogic service provides the ability to perform tasks that require 
administrative rights without sacrificing user-level security at the workstation. 
By using this specialized service, ScriptLogic is able to make changes to the 
registry, install software, add printers, synchronize time and perform any 
other tasks that require elevated rights during the logon, logoff or shut down 
sequences. 

To install the ScriptLogic service, two unique sets of user credentials must 
be supplied. One user account must have local administrative rights on each 
workstation. By default, the global Domain Admins group is a member of the 
local Administrators group on each NT based workstation. Selecting a user 
account that belongs to the Domain Admins group would satisfy this require- 
ment. This account will be used by the ScriptLogic service on each server to 
remotely install the ScriptLogic service on each workstation. 

The second user account will be used by the ScriptLogic service on each 
workstation to perform the actual tasks that require the elevated administra- 
tive rights. This user account only needs to be a member of the Domain 
Users group. 

Be sure to remember the logon name and password for these 
accounts. You will need to use this information to install the 
ScriptLogic service following the installation. 




Upgrading from a previous version of ScriptLogic 

If this version of ScriptLogic is being installed as an update from a prior 
version be sure to read the ScriptLogic release notes which can be found 
online. 
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Installing ScriptLogic 



The ScriptLogic installation program creates the following subfolders under 
the Program Files folder as a default location. This location can be changed 
during the installation process. 

B Q Program RIes 

B"© ScriptLogic Manager 
I $• Ql Backup 
I fi CSl Data 

\ h fil Logs 

1 (±1 Saipts 
Q Services 



\ScriptLogic Manager 

This folder consists of all necessary program files needed by the 
manager. This includes online help and default configurations for the 
ScriptLogic Manager. This folder is shared as SLOGIC$ by the 
default installation. 

\ScriptLogic Manager\Backup 

This folder contains backups of each profile's client configu- 
rations. 

\ScriptLogic ManagerVData 

This folder contains profile description and validation logic 
defaults. 

\ScriptLogic Manager\Logs 

This folder contains all log files created as specified on the 
Logging tab found within the Profile Options dialog box. This 
folder is shared as LOGS$ by the default installation. 

\ScriptLogic IVIanager\Scripts 

This folder includes all necessary files to load and run 
KiXtart and ScriptLogic scripts. This folder includes the 
configurations made in the ScriptLogic Configurations dialog 
box. The files in the Scripts folder will be published to the 
domain controllers when replication is requested. This folder 
is shared as SLSCRIPTS$ by the default installation. 

\ScriptLogic Manager\Services 

This folder contains the files necessary to create and 
configure the ScriptLogic service. 



Performing the Install 



The following series of steps walk you through the installation of ScriptLogic. 
ScriptLogic can be Installed on any Domain Controller or Member Server 
(with a NETLOGON share) on your network. Be sure to read the preceding 
sections of this chapter to learn about the infomnation you will need to know 
for the installation. 

The ScriptLogic installation requires administrative rights. If you are not 
logged on as an administrator, please log on as an administrator before 
starting the installation. 

If you are installing ScriptLogic from a CD and your CD-ROM supports 
AutoRun, the ScriptLogic install will begin automatically. If the installation 
program does not begin automatically, press the Windows Start button and 
select Run. At the prompt, type x:\setup.exe, where x is the letter of your 
CD-ROM drive. Press the OK button. 

The installation wizard walks through a series of dialog boxes prompting for 
information that is needed to copy the ScriptLogic program to your computer 
as well as configure ScriptLogic for its initial use. Pressing the Next button 
on each dialog box will advance to the next option. The Back button will go 
back to the prior dialog box. Pressing the Cancel button will abort the install. 

1. Welcome is the initial dialog box. Press the Next button to continue. 

2. The Software License Agreement dialog box appears. If you agree with 
the license agreement, press the Yes button to continue. 

3. On the Registration dialog enter your Name, Company in the 

appropriage entries. These fields are required. If you have purchased 
ScriptLogic enter your Registration Key. Users evaluating ScriptLogic 
should leave the registration code blank. You may optionally press the 
Browse button to locate your register.ini f\\e. If you have this file it can 
be used in place of manually typing in your Name, Company and Regis- 
tration Key information. If no register.ini T\\e exists, manually enter the 
requested information. Press the Next button to continue. 

4. The following dialog box, Information, provides extra release notes not 
mentioned anywhere else. Press the Next button to continue after 

reading this information. 

5. On the Choose Manager Location dialog box, select a path and 
destination folder. The default installation path is x:\Program 
Files\ScriptLogic Manager. Press the Next button to continue. 

6. If you are upgrading ScriptLogic, the previous version of ScriptLogic 
should be detected at this point 
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Before installing any product upgrade, a connplete backup 
should be performed. 

You are informed that all existing configurations will be saved. Press the 
OK button to continue. 

7. On the Choose Log Path dialog box, select a path and destination 
folder This folder is where the log files are stored. Log files store infor- 
mation about users as they log on to the network. The contents of the log 
files are customizable within the Profile Options dialog box. 

The default installation path is x:\Program Fi!es\ScriptLogic 
Manager\Logs. 

\ * J Choose this directory carefully. Log files grow in size as they 

are constantly updated every time a user logs into the network. 
Make sure the drive has enough available disk space to handle 
these logs. 

Press the Next button to continue. 

8. The Log Share Name dialog box appears. Enter the share name of the 
Logs folder. By default, the installation program creates this share name 
as LOGS$. Leave this entry blank to disable logging. 

Logging can be enabled at a later time in the Profile Options dialog box. 

Press the Next button to continue. 

9. On the Select Program Folder dialog box, enter a Program Folder name 
or accept the default Press the Next button to continue. 

10. Confirm the installation settings and press the Next button to begin the 
Installation of the program files. 

11. After the files are finished copying, press the Finish button to complete 
the installation. 

12. Once the installation is complete, the Server Manager will automatically 
load. The Server Manager must be updated with Server information and 
the service must be installed/updated. 

If this is the first-time installing ScriptLogic (ie. not an upgrade), you will 
be prompted to auto-detect the Domain Controllers on your network. 
Press the Yes button to automatically allow ScriptLogic to locate your 
domain controllers and populate them in the lisL You can manually 
update the server list by pressing the No button. To manually add a 
server to the server list, press the Add button. To force the Server 
Manager to automatically discover your networks servers, press the 
Discover button. 

After updating the Server Manager with all server information, the 
ScriptLogic Service must be started. 
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To install or update the ScriptLogic service, click on the individual 
service cell or the ScriptLogic Service column header to select all 
servers. Right-click on the selected server(s) and select Install service or 
Update service image from the popup menu. 

Enter the Login Id and Password for both a Domain Admin and a Domain 
User account. These entries are required if the services were selected to 
be installed. The Domain must also be provided. Press the More Info 
button to read more about these two special accounts. 



Service configuration 



The>>ScriplLogic service requires {wo unique users accourits. ' ; 
Please-'prpvide one user abcourit belonging, lo the Dbmain Admins 
group and one belonging to Domain Users group. 



'MoreJnfo\' 



-Server Service (Domain AdminJ^^ 
Logonas^^' 



.Password 



I Gohf ifm tP^assw^^^ y | ; ' 



■^7 Kr 



fi 



P Client Servica:(Domain User)^ 1..^:.^ 

iLog.oh^as:, , / ^ } ' ' 



Password: 



.'CorifiirajliasswQrdr^^ ' v ^> \' ^ 



.„^S|arlup)|.l|p^^ 



Automatic 



(Eanc'elll 

>>;-?'a-& ■ i^fcK,-: 



Press the OK button to continue. In a few moments the service will be 
installed/updated and started on the selected server(s). 

13. For each server in the Server Manager list, confirm the Target column. 
The box should be checked for each server that will host ScriptLogic's 
configuration files when replicating. This should be checked for all 
authenticating domain controllers. The installation of ScriptLogic is now 
complete. 
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Installation Errors 

An error occurred during the move data process: -132 



ScriptLogic Selup 



0 



An enor occurred during ttie move dataiprocn«r ^132 

Compohertt 
File Group: 

■file.- • . 



This error can occur when upgrading to a new version of ScriptLogic. 
The ScriptLogic Manager may be running when the installation program 
of the new version is started. 
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Product Registration 

If no registration code was entered at the time ScriptLogic was installed, you 
nnust register your product to turn off the evaluation time period. A registra- 
tion code is provided at the time of purchase to turn the evaluation version 
of ScriptLogic live. All configurations made during the evaluation period are 
immediately available after the registration key code is entered. You can 
continue all administrative functions immediately. 

Enter the provided registration key code by selecting Help <=> Product 
Registration from the menu bar or select the ScriptLogic Registration 

item in the ScriptLogic program group from your Windows Start menu. The 
following dialog box appears: 



Fill in the following entries on the registration dialog box: 
Name 

Enter the Name that ScriptLogic is registered with. Make sure to 
type this information carefully. This entry is case-sensitive and must 
be the same name it was purchased with. This entry is required. 

Company 

Enter the Company that ScriptLogic is registered with. Make sure to 
type this information carefully. This entry is case-sensitive and must 
be the same company name it was purchased with. This entry is 
required. 
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Key 

Enter the registration key supplied at the time of purchase. Evalua- 
tion users should leave this entry blank. 

Press the Browse button to locate the registration Jni f\\e if one has been 

supplied to you. This registration file will automatically fill in the Name, 
Company and Key entries for you based on your current installation. 

Press the OK button after entering the above information. If any of the 
above fields are incorrect, you will be prompted with an appropriate mes- 
sage. 

If all registration data is entered and verified to be correct, you are prompted 
to replicate the change to the domain controllers. Press the Yes button to 
replicate the registration data or the No button to replicate the data at a later 
time. The registration process does not become effective until the data is 
replicated. 

Once the product is registered and the information is replicated, the 
ScriptLogic Manager will display the registered owner's name and license 
information. 




Updated registration information is not displayed in the 
ScriptLogic Manager or on client machines until the client 
subsequently logs back onto the network. 



I 
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Where to go from here 

Now that ScriptLogic has successfully been installed (and registered, if not a 
trial version), it must be configured. Refer to the Administrator's Guide, 
ScriptLogic Manager Interface chapter for detailed information on each 
configuration dialog box contained in the ScriptLogic Manager, 

The next chapter, ScriptLogic Concepts, will introduce you to how 
ScriptLogic works during the logon process. Use this chapter as an introduc- 
tion to the ScriptLogic environment. The tutorial chapter contains a full step- 
by-step walk through on configuring ScriptLogic. There are three comprehen- 
sive tutorials that step through the configurations needed for common 
working environments. 

Remember, no ScriptLogic configurations will take place until the following 
two tasks have been completed: 

• In any or all user profiles, change the user's logon script to the logon 
script managed by ScriptLogic. SLOGIC. ScrlptLogic's Assign Script 
menu selection may be used to assign the logon script(s). 

• The changes in the ScriptLogic Manager must be saved and then 
replicated. Once the changes are replicated, they are live and ready 
to be implemented for any user that runs the SLOGIC logon script at 
the time they log on to the network. 
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ScriptLogic Concepts 




Overview IHHBB^Mf 

In this chapter, we will discuss how ScriptLogic works. This includes the 
basic concepts of the ScriptLogic Manager, ScriptLogic scripts, the logon 
process including the execution of ScriptLogic. 

These concepts will serve as a foundation to using and maintaining 
ScriptLogic. 

How ScriptLogic works 

ScriptLogic logically consists of two components: the ScriptLogic Manager 
and the ScriptLogic scripts. 

The ScriptLogic Manager is an intuitive GUI-based tool that provides the 
ability to centrally configure settings for the script component. The 
ScriptLogic Manager stores configuration settings in a single file per profile. 
These settings are executed during the logon process after the user is 
successfully authenticated onto the network. 

The ScriptLogic scripts component is the set of applications that are ex- 
ecuted on each client during the logon process. 



Manager 



Scrlpis 



ScriptLogic 




Domann ContraUer 



Qient 
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ScriptLogic Manager 

The ScriptLogic Manager configures settings for the script component by 
modifying configuration files in the SCRIPTS$ share. 
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Once the changes are saved, they are ready to be published to the 
NETLOGON share. This is done using replication. The replication process 
will update ail specified domain controllers with the updated script configura- 
tions. The next time each user logs on to the network, ScriptLogic will 
execute with the updated settings. 



ScriptLogic Scripts 



When a client attempts to log on to the network, they are first authenticated 
by a domain controller. Once they are authenticated, the user's logon script 
is executed. ScriptLogic's logon script is SLOGIC.BAT, This script must be 
set as the user's logon script in order for a client to execute ScriptLogic. The 
logon script is a simple batch file that initiates the inner workings of 
ScriptLogic. 
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The SLOGIC.BAT T\\e performs a number of pre-flight-checks and then 
launches the main ScriptLogic engine. 

These pre-flight-checks include: 

• Confirmation that ScriptLogic is being executed on a 32-bit Microsoft 
Windows operating system. 

Determination of whether the client should bypass the execution of 
ScriptLogic. This occurs only if the special option file, SLBYPASS, exists 
for the user or workstation. 

• Verification that the ScriptLogic folder exists on the client. If It does not 
exist, it is created. 

• Creation of a version stamped file and copying of the SLSTART.EXE to 
the client's \ScriptLogic folder. 

• Verification that the script files on the client are the same version as the 
ones on the server. If they are different, they are purged and ScriptLogic 
executes from the NETLOGON share. If ScriptLogic has been executed 
on this client before, the built-in "push" technology would have copied the 
ScriptLogic client files down to the client's \ScriptLogic folder on the 
system drive. Executing ScriptLogic from the client's local hard drive 
saves network bandwidth and greatly reduces dial-up logon times. 

Finally, the ScriptLogic engine is launched by executing SLSTART.EXE from 
either the client's ScriptLogic folder or from the authenticating Domain 
Controller's NETLOGON share. 

SLSTART.EXE 

The SLstart application handles the options configured through the 
Global Options dialog box in the ScriptLogic Manager, displays the 
graphic bitmaps and updates the progress indicator during the logon 
process. In addition, the SLstart application also: 

• Verifies that the KiXtart executable {KIX32.EXE) is not corrupt. 

• Verifies that the client's %temp% environment variable, which points 
to a folder that holds temporary files, is defined and points to a valid • 
folder. If %temp% is not configured correctly, ScriptLogic will termi- 
nate. If %temp% points to a folder that does not exist, SLstart will 
attempt to create this folder and continue. If SLstart Is unable to 
create this folder, ScriptLogic will temiinate. 

• Determines if the computer's operating system is Windows 9x and if 
user profiles are enabled. If user profiles are enabled on a Windows 
9x computer, SLstart queues itself to run a second time using the 
registry's RunOnce key. It then terminates so that the user's profile 
can be loaded. 
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• Displays the ScriptLogic splash screen or customer-supplied image. 

• Loads the main script engine (SLENGINE.DLL) into memory and 
begins processing. 

SLENGINE.DLL 

SLengine is the main ScriptLogic processing engine. The engine is 
responsible for: 

• Processing the user defined variables to be used in the Manager or by 
custom scripts. 

• Reading the Manager's configuration settings into memory. 

• Executing pre-englne custom scripts. 

• Processing the Manager's settings. This Is where drives are mapped, 
printers are deployed, application and OS registry settings are ap- 
plied, applications are queued to launch, message boxes are dis- 
played, and Outlook mail profiles are created. 

• Updating the ScriptLogic log files. 

• Executing post-engine custom scripts. 

• Signaling SLstart that the script is complete. 

When the logon script completes, the Operating System loads the Windows 
Explorer Shell (the clients desktop). Then, programs queued for launch by 
the ScriptLogic Engine (using the registry's Run key in the HKCU hive) begin 
to execute. These programs may include CLRNAME.EXE (to optionally clear 
the last user's name from the Windows 9x logon dialog box), CLRRUN.EXE 
(to clear the registry's Run key of any values created by the ScriptLogic 
Application Launcher), and any other programs configured to automatically 
start by the Application Launcher tab in the ScriptLogic Manager. 



32 



ScriptLogic Getting Started 



Tutorial 



Introduction 

Welcome to the ScriptLogic tutorial! 

We have provided three tutorials in the form of case studies to help put you 
on the fast track with ScriptLogic. Each study presents the network layout of 
a hypothetical company in order to discuss the ScriptLogic configurations 
that each company will use to effectively configure their user's networking 
environment. The tutorials provide step-by-step lessons that demonstrate 
how to configure each setting. 

The first case study presents a brand new network installation from the 
ground up. All client environment configurations will be defined using 
ScriptLogic. 

The second case study presents a company in which you are the newly hired 
network administrator. You will be migrating the existing batch file logon 
scripts Into ScriptLogic. Further configurations to modify the client's environ- 
ment will follow the initial setup of ScriptLogic. 

The third case study introduces a large company that spans four locations. 
The network infrastructure is designed as a Master-Resource NT4 domain 
model. One of the locations has purchased ScriptLogic for installation at 
their site. This study will demonstrate how to set up ScriptLogic at this 
location even though the local administrator of the resource domain does not 
have appropriate access to the Master Domain where the SAM (Security 
Account Manager) database/user accounts are maintained. 

If you have not already installed ScriptLogic, please refer to Chapter 2, 
Installing ScriptLogic, for a guide to installing the program. 

When working through the lessons, you may try them out in 
your own environment. Simply replace the lesson's server 
names, resource names and group names with valid names 
from your own network. 

Let's get started! 
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The Company 

Our first case study involves Allied Marketing Inc. located in Rochester. New 
York. Allied Marketing is a rapidly expanding company selling promotional 
items. Since the company is ready to expand their operations, they have 
decided that it is time to enhance their company by networking their existing 
computers. This will greatly help their day-to-day operations. In pursuing this 
need, they must decide whether they will hire an outside consultant or a full- 
time employee to set up their network and administer their daily needs. 

Jim Cooper proposes a solution that involves the use of a product that will 
help the company manage their newly designed network with only minimal 
involvement of an outside consultant. Jim offers a deal that has him design 
and build the network. Once the network is set up, he will work with a 
selected individual from the company to install and familiarize them with 
ScriptLogic. ScriptLogic will be used to maintain a consistent working 
environment for all employees. 

This solution provides the company with simplified network administration 
needs, more productive users, and a reduction in costs since ScriptLogic 
reduces the amount of work to be done by a "network administrator" (a full- 
time network administrator will not be needed). Jim will be called in on an as 
needed basis to solve any difficult problems that the company may encoun- 
ter. 

Agreeing with this proposal, Allied Marketing accepts Jim's offer. Work is 
slated to begin the following week. The first task is to analyze the existing 
hardware and software. 

The following resources exist at the office: 

20 PCs currently in use with Windows 98 operating system, 

3 PCs not currently in use (used as spares) with Windows 98 operating 

system, 

2 HP laser printers, 

and miscellaneous other pieces of equipment. 

The network that Jim has in mind will be designed with 20 workstations. 
There is plenty of room for expansion. The network will have 3 network 
printers attached to it for use by the Customer Service, Sales, and Account- 
ing departments as well as the Executives. The network will be directed by a 
single server. It will serve as the network's Domain Controller, Print Server, 
File Server and Mail Server. 
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The following extra equipment is required to set up the networl^lng environ- 
ment: 

Server: A 933 GHz processor with 256K RAM and an 18GB hard drive 
Network Switch: A 48 port 10/100 switch 
Network Cards: 20 Ethernet 10/100 network controller cards 
Router: DSL Router 

Backup: 20/40 Tape Backup Drive and Software w/10 tapes 

Printers: HP 4000 LaserJet / Jet Direct Card, 2 extra JetDirect Cards for 
existing printers. 

Software: Windows 2000 Server, Exchange 2000 Server, ScriptLogic 

UPS: Smart UPS 1000 

The following network layout depicts a view of the proposed network at Allied 
Marketing. 

Domain for Allied Marketing Inc. 
(AUIED) 

All servers consist of a 
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Now that Jim has installed ail of the necessary equipment and software (for 
detailed information on installing ScriptLogic. refer to Chapter 2, Installing 
ScriptLogic), Users and Groups must be created. Once these are created, 
users can successfully log on to the network. 

Upon creating User profiles, Jim specifies the necessary information in the 
user's profile for home directories. Each user's home directory is set to drive 
y with a location of \\Apollo\Users\%UserName%. 

f Home Directory — ^ • . — , . 



Once ali users are created, Jim creates the network Groups and assigns the 
particular users into their corresponding groups. The groups that he creates 
are CServe, Acctg, Sales and Execs. 

Now, it's time to configure ScriptLogic. The application is installed to the 
Apollo server on drive C. 



C Locai'Palh: 
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Lesson Overview 

In the following lessons, Jim will demonstrate how to configure ScriptLogic, 

Prior to setting any user configurations within ScriptLogic, the Manager 
defaults should be defined. Setting the default Manager preferences pro- 
vides a more efficient session with ScriptLogic. The settings in Server 
Manager must be verified. Ensure the required service is running in the 
Server Manager. Verify that the Server Manager contains the necessary 
server(s) for data replication. 

The first set of lessons will examine the ScriptLogic environment and 
demonstrate how to effectively set up the working environment by: 

• defining the ScriptLogic Manager defaults, 

• configuring the Server Manager, and 

• assigning the SLOGIC logon script to the network users. 

The next set of lessons will show how to configure ScriptLogic to use: 

• shared folders, home directories, and drive mappings, 

• printer port redirection, 

• mail profiles, 

• environment variables, 

• paths, 

• desktop shortcuts, 

• Internet settings and 

• replication and testing. 
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Following the installation of ScriptLogic (detailed information regarding the 
installation of ScriptLogic can be found in Chapter 2, Installing ScriptLogic), 
the Global Options. Profile Options, Profile Managei- and Preferences should 
be configured. 

Global Options are used to configure global settings that apply to how 
ScriptLogic is run on all clients. 

The Profile Options and Profile Manager allow the configuration of the 
default profile as well as the ability to add new profiles. Since Allied Market- 
ing exists in a single location and will have an average number of configura- 
tion entries in ScriptLogic, a single profile will be used in the ScriptLogic 
Manager to handle the company's needs. ScriptLogic comes with a default 
profile which may be used right away or configured to meet certain specifica- 
tions. Additional profiles may be added when necessary. 

Preferences are used to set defaults for the ScriptLogic Manager. 

The Server Manager should also be configured. It is essential to have the 
managers configured correctly before getting started. If they are not config- 
ured correctly, the users may not receive the most current ScriptLogic 
settings when they log on to the network. 
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Lesson 1: Setting Manager Defaults 

The Manager Preferences dialog box (File ^ Preferences) defines default 
values for several common fields used throughout the manager as well as a 
default configuration description, file paths and Manager startup options. 
Modify these preferences as needed. 

The Default Description is stored to each new client configuration entry in 
the Manager. Allied Marketing will use this description to save the userid of 
the user adding the configuration entry. 

>To configure the Default Description: 

1 . Select the Edit tab and provide the following default description in the 
Default Description field. 

Created by $Userid 

The ScriptLogic install creates an initial profile which will house all client 
configuration settings. Multiple profiles may be used to break up and valida- 
tion different client configuration settings. 

Setting the profiles validation logic is the next step. These validation logic 
settings provide a base that all client configurations will use. If a specific 
option is turned off in the profile's validation logic, it will not be available for 
use in any client configuration setting for the profile. 

>To configure the Profile's Validation logic: 

1 . Press the Profile Manager button from the Manager's main dialog box. 

2. Select the specific profile to be modified. For the purposes of this tutorial 
there will only be a single profile called SLP0001. Highlight this profile 
and press the Modify button. 

3. Since Allied Marketing does not have any Terminal Server Clients, NT, 
2000, 2003 or XP workstations in use, the first logical step is to uncheck 
these options in the default dialog box. 

Uncheck the Term Serv Client Class check box. Member Server and 
Domain Controller should be unchecked by default. 

In the Operating System section, uncheck the NT, 2000, 2003 and XP 
check boxes since none of these operating systems are part of the 
network's make-up. 

Leave both Connection types checked. 

4. Press the OK button to save the profiles options. 

All new client configuration entries will adhere to these validation logic 
rules. All unmarked settings will be disabled, preventing the use of them 
in the validation logic. 
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Another common default setting is the Validation Logic defaults. This can be 
found on the Default Validation tab of the Profile Options dialog. Setting up 
validation defaults here will make your job of configuring ScriptLogic easier. 
Once the logic is defined here, it will not have to be defined again for each 
new element, unless further rules are required. These rules further enhance 
the validation logic specified in the Profile Manager. 

►To configure the profile's Default Validation logic: 

1. Press the Profile Options button from the ScriptLogic Manager main 
dialog box and select the Default Validation tab. 

2. Term Serv Client Class, Member Server and Domain Controller should 
be disabled since we deselected them in the Profile Manager settings. 
Let's uncheck the Tablet PC class here. Each new client configuration 
entry will have classes above disabled. Tablet PC will not be disabled 
just unmarked. This provides the ability to turn it on for a single client 
configuration entry at a later time. 

NT, 2000, 2003 and XP check boxes should be disabled since they were 
deselected in the Profile Manager settings. 

Leave both Connection types checked. 

Whenever a configuration is created in any of the Client Configuration 
dialog boxes, these validation logic rules will automatically be applied as 
the default. They may be overridden in any of the individual configura- 
tion dialog boxes. 

The Default Validation dialog box should look similar to the following: 
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3. Press the OK button to save the default preferences. Unlike most of the 
configurations in ScriptLogic, the Manager Preferences will take effect 
immediately after the dialog box is closed. 

Press the OK button to save the settings. 
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Lesson 2: Server Manager Setup 

Server Manager is used to configure Replication and manage the Script- 
Logic service. 

Replication is the act of duplicating information from one defined location to 
another. ScriptLogic uses replication to copy the ScriptLogic configurations 
to all domain controllers. These domain controllers must be defined in the 
Server Manager. By default, these are defined during the install of Script- 
Logic. However, if this list is incorrect or a domain controller has been added 
to or removed from the network, it must be updated. 

Allied Marketing has a single domain controller named Apollo. Confirm the 
existence of this server in the Server Manager list. Since this is the only 
domain controller for the network, make sure the target checkbox is set for 
this server and that the ScriptLogic service is installed and running. 

To confirm the domain controller list, press the Server Manager button from 
the ScriptLogic Manager main dialog box. Press the Add or Delete button to 
update the server list, if necessary. 

Upon adding the server, the Server Manager will automatically make it a 
target for replication and start the ScriptLogic service. It will also be set to 
grant service requests. This service provides the ability to perform tasks 
that require administrative rights without sacrificing user-level secu- 
rity at the workstation. 

Allied Marketing has the following Server Manager setup: 
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Lesson 3: Assigning a Logon Script 

In order for ScriptLogic to execute for a client, the user nnust have a logon 
script named SLOGIC assigned to their user account. This logon script nnay 
be assigned to the user using UMD or fronn within the ScriptLogic Assign 
Logon Script dialog box. 

►To assign the logon script from within ScriptLogic: 

1. Press the Assign Logon Script button from the ScriptLogic Manager 
main dialog box. This opens the Assign Logon Script dialog box. 

2. This dialog lists ail users from the SAM database. Using Windows 
standard tagging techniques, select each user that will be assigned the 
SLOGIC logon script. 

3. Press the Assign Logon Script button to assign the ScriptLogic logon 
script. 

Note that once a logon script is assigned to a user, that user can log on to 
the network and execute ScriptLogic with the configurations appropriated to 
them. 
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Lesson 4: Drive Mapping 

Drive Mappings provide easy access to commonly used folders. Mapped 
drives commonly point to folders on the file server. When mapping a drive, a 
local drive letter is assigned to a specific shared folder on the network. 

Jim decides to create a common shared folder that all users will have access 
to. This folder will be called CommonFiles. Drive S will be mapped to this 
folder. Since there is only a single server named Apollo, the UNC for this 
folder is specified as \\Apollo\CommonFiles. 

>To implement the drive mapping, follow these steps: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Drives tab. 

3. Press the Add button. 

4. Choose drive letter S from the Letter drop-down list. 

5. Specify the share that the drive will be mapped to in the Shared Folder 
field. In this case, it is \\Apollo\CommonFiles. 

6. Accept the default of Continue if this drive fails to map. This ensures that 
all other drive mappings are attempted even if this one fails. 

7. Accept the default Validation Logic. The Type is set to Group Member- 
ship and the Value is set to an asterisk (*). The asterisk (*) is a wildcard 
that is used to specify "any" within the selected validation type. In this 
case, the drive mapping will be validated for any user assigned to a 
group. Since all users are assigned to groups, the drive will be mapped 
for all users. 
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The Drive Settings dialog box will look like the following: 
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8. Press the OK button to save the new settings. 
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The salespeople will need one other drive mapping in order to access their 
CRM application. Map Drive Letter 7 to the \\Apollo\Sales share. 
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Now it's time to configure the user's home directories. Jim has decided to 
Root Map the user's Home Directories. The Root Mapping concept origi- 
nates from the Novell Netware operating system. It allows a drive to be 
mapped to a directory that looks and acts like a root directory instead of a 
subdirectory. Root Mapping to the user's home directory provides a simple 
path to the directory. Since all other users' home directories on the drive are 
invisible to the user, there is no confusion as to where the directory is. The 
user does not have to scroll through a list of folders to search for their own 
folder. This makes it faster to find what they are lool<ing for. 

If drive Y is specified as the user's home directory in the UMD applet, the 
folder is referenced on the client as Y'AFFIintstone, for example. However, if 
the folder is root mapped, it is simply referenced as Y:\. 
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In this example, User Manager for Domains (UIVID) has each user's account 
set up with home directory locations. The drive has previously been set to Y 
and the location is set to \\Apollo\Users\%UserName%. 

Verify each user's profile settings. Confirm that the drive letter is not the 
same letter that will be used in the ScriptLogic drive mapping. In this ex- 
ample, we will use drive letter H for the ScriptLogic drive mapping. 

Now that each user has a home directory, we will assign Full Control NTFS 
permissions for the Domain Administrators' account to access it. The group 
will be given access to this directory for the purposes of daily backups and 
administration needs. 

To grant the Domain Administrators access to this folder, load Windows 
Explorer and navigate to the E:\Users folder. Expand the folder to show each 
user folder beneath it. Right-click on each user folder and select Properties. 
Select the Security tab. Press the Permissions button. You will see that 
only the user has Full Control access to this folder Press the Add... button 
and double-click Domain Admins from the selection list. Set the Type of 
Access to Fuil Control, Press the OK button twice. Back at the Properties 
dialog box, select the Sharing tab. Select the Shared As button to share the 
folder. The share name is set to the user id. 

It is recommended to make each directory a hidden share. This means that 
the folder does not appear when users are browsing the network using 
Windows Explorer or Network Neighborhood. A hidden share has a dollar ($) 
sign appended to the end of the share name. For example, an employee 
named John Doe may have a shared folder named JDOE$. 

Press the OK button to save the user information. At this time, the user 
folder is shared and the User and Administrators both have access to it. 

Complete the above process for each user folder. Once this process is 
complete, you should have a base User's folder with each individual user's 
folder shared as follows: 

(E:) 

Users 
B Smith 
I G J ones 

I Hughs 
j I --S KMcGovern 
j ■fe M Ferguson 
^ "fe TWiiliams 
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Now that the correct folders have been created, we will use ScriptLogic to 
root map the home directories to drive H:. 

1. Load ScriptLogic and press the Client Configuration button. Select the 
Drives tab. Press the Add button. 

2. Select drive letter Hfrom the Letter drop-down list. 

3. The Shared Folder will consist of two ScriptLogic predefined dynamic 
variables, $HomeServer and $HomeDir. Set it to 
\\$HomeSen/er\$HomeDir$$. Using these dynamic variables allows us to 
create a single entry in the Drives tab versus an entry per user. The 
values of the dynamic variables are resolved based on the user that Is 
logging on to the network. 

$HomeServer evaluates to the user's home directory server as defined 
in the user's account. $HomeDir represents the folder specified as the 
user's home directory in thie user account 




In this case, $HomeServer evaluates to Apollo. If FFIintstone is the user 
logging onto the network, $HomeDir evaluates to FFIintstone. 

In the Shared Folder field, be sure to add a double dollar sign ($$) at the 
end of the Shared Folder specification. A single dollar sign ($) normally 
indicates that the specified share is a hidden share. KiXtart recognizes a 
single dollar sign ($) as an indication that a dynamic variable is to follow. 
In order for KiXtart to process this correctly, we must use a double dollar 
sign ($$) to clearly indicate it as a hidden share. 

4. Accept the default Validation Logic Type of Group Membership and 
Value of *(all groups). The Operating System and Connection sec- 
tions of Validation Logic will remain the same as our default settings. 
This will cause the mapped drive to be defined for all groups. 
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The Drive Settings dialog box should be similar to the following: 



fi 



Drive Settings 



• Letter Path- '" " " ['''- '^ ~ 
|h \\$HomeServer\$homeDir$$ 



O Hide from Windows -Explorer ' 
E xpbrer Label^(2QbQ and, newer) " 



■ On Error ^ 

I Continue 



pValidation Logic= 
Type / 



Value- 



Group Membership 



"Glass- 



ETDesktop,^ - 
@ Notebook 
Igi Tablet PC 

(yj "^^errn^SBOwOie^ 
Q Iterriber/f ef,vefi , 
D Q^onriaiijaContr offer' 

Description' 



;M;98" 0 20001 



- Connection = 
g LAN- 
Dial-up- 



This shared folder will evaluate to the \\Apollo\FFIintstone, for exannple, 
share when Fred Flintstone logs onto the network. 

5. Press the OK button to save the drive configuration. 

Be sure to Save and Replicate these changes when all configurations are 
complete. 
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Lesson 5: Mapping Printers 

Printer mappings are the redirection of a local resource (LPT printer port) to 
a shared network printer. This is commonly called capturing a printer port. 
The new Allied Marketing network has three printers connected to it. Each 
printer belongs to a certain department (group). 

> Jim will define settings in ScriptLogic to assign the user's local LPT2 printer 
port to their own departmental printer. 

1 . Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Printers tab. 

3. Press the Add button. 

4. Specify the printer in the Shared Printer field. !t should be specified in 
the form of \\server\printer. For our example, specify 
\\Apollo\Acctg_Laser. 

5. Select a port number from the Port drop-down list. This is the port that 
will be used to map the printer to. Select LPT# 2 (LPT2). 

6. Accept the default Validation Logic Type of Group Membership. Set 
the Value to the Acctg group. This printer will be mapped for all users in 
the Accounting group. 




On NT workstations, ScriptLogic can automatically install the 
printer driver. On all Windows 9x workstations, the printer 
driver must be manually installed. 
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The Printer Settings dialog box should be similar to the following: 



Printer Settings 



Pfintef Type 
J Network Printer 



B 



Shared.printer 



\\Apollo\AcctgL.La$er 



Printer IP 



F Eaplure 
^ LPTtt 



mmm/XP clients orily- 
Auto add/remove^ 



D Jet as default'' 



diei?tfha%ailbsd'griffi|et"a^^^ 'r\ 

r Validation l-ogiG rr- 

Type Value- ■ , ' . , 



Group Membership 



|Acclg 



Classr 



g bisktop ""'^ 
)3j Notebook. . 
13lablel PC'' 
O Henri. Ser.^C[]eint 
O M§[nbef?lefrvfe{? 
□) SoniaibjCbntrollep 



g 95 O wl:: 

Pi, 98 Q] 2000) 
Ml Me nUl?^ . 



f= Cohneclibn^i 
I El LAN ' 
J El Dial-up 



Description 



7, Press the OK button to save the new setting. 

Jim will add two more entries to the printer list using the following 
values: • 



Shared Printer 



Group- Mem b ersfup 



4-^^2>.. \, .Mpollo\Sales. Laser.., >.;^^j^,Sales, ;;^;, ^£-^■,^ :■ ^ . 



\\Apollo\Exec_Laser 



Execs 



8. After defining all of the printer redirections, press the OK button to return 
to ScriptLogic's main window. 

Be sure to Save and Replicate these changes when all configurations are 
complete. 
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Lesson 6: Configure Mail Profiles 

In this lesson, Jim will configure ScriptLogic to create mail profiles for all 
Domain Users. Mail profiles are used to connect a user to a Mailbox on 
Exchange. The profile is stored on the client's workstation. Allied Marketing's 
network contains Exchange on the Apollo server. Each user has a mailbox 
on Exchange. The alias of the mailbox matches the user's network logon id. 

>To configure mall profiles: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the IVIail Profile tab. 

3. Press the Add button. 

4. Select Do Not Overwrite from the Overwrite drop-down list. This option 
determines whether or not the Exchange profile will be created on the 
workstation. If a user profile exists with the same exact profile name, it 
will be preserved with Its existing settings. However, if a default profile 
exists on the workstation using a different profile name, a new Default 
profile will be created. Assuming a new default profile is created, the 
user will have to perform a one-time reconfiguration of their default 
Outlook settings. These settings include the personal address book, 
personal folders, offline address book, offline folders, startup view, spell 
check, and auto-archive. 

5. Enter a name to use for the Mail Profile Name. We will create profiles 
using the user's full name as it is defined in the UMD applet. Type in 
$FullName or select it from the Dynamic Variable selection list by 
pressing F2. 

6. Enter the server name for the Exchange Server. In our example, we will 
enter WApollo. 

7. Enter the Mailbox Name that corresponds to the user's mailbox on the 
Exchange Server. This should be done using a dynamic variable, 
$Userld. $Llserld is substituted with the name of the user logging onto 
the network. 

8. As a default for new profiles, we will enable Personal Address Books. 
They will be stored in the user's home directory so they are accessible 
from whatever workstation they log on to. Enter H:\Exchange for the 
location of the Personal Address Book (PAB) folder. Remember, H: 
was mapped as each user's home directory. This mapped drive will be 
available on any machine the user logs on to. Check the Enable Per- 
sonal Address Book check box. Leave the default for the PAB File 
Name. 
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The Mail Profile tab should look similar to the following: 



Mail Profile Settings 



pMaJ PfofBe - 



Ovcfwrite jOo No|Ovefwrte W\j 



Pioffle Jemplale FBe jexchpfof prf 



Mad Profae Name ISFuDName 



Exchange Saver iWApoDo 



Mailbox Name iSUsedO 



Type- 



I Group Mem bership 
r Class - ■■ 



Value. 



ijgf Desktop ' 
I g" Notebook 
Pi] Tablet PC 
^ Tfsrm STerv-ClieMr' 
: Oj M ember Server; 
iO Demain :f[;^ntro{leii 




'PAB & Personal Fddei Settings?^ 
Pj; Ejiable Personal Addiess Book 
r PAB Re NameljJsedDPAB 

rp' Enable.Personal FoUef$< 
PST FHe Name liUserlDPST " 



Fddet . jhAExcbange 



rflffline AccessSettings- 



G Enable Offline Address Book ; 

□ Enable Offli ne Foldefs 

QST rile-Ndine;| S U seriD.OST j| 

' iirsi: 



Foldei 



9. Press the OK button to save the new settings. Press the OK button again 
to return to ScriptLogic's main window. 

Be sure to Save and Replicate these changes when all configurations are 
complete. 
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Lesson 7: Environment Variables 

The Allied Marketing salespeople use a CRM to track their customers. This 
application has a logon feature whereby the employee must log on to the 
application using their initials. Jim will create a batch file that loads the 
application and automatically supplies the user's initials. These initials are 
automatically retrieved based on the user logged onto the network. 

ScriptLogic can easily retrieve these initials by looking at the user's account 
information. If the user description field in UMD is set up to the format of 
#ABC, where ABC are the Initials of the user, then the three characters 
following the # are set by ScriptLogic to the $lnitials dynamic variable. The 
dynamic variable can then be used to supply the initials to an environment 
variable. 

►We can easily accomplish this setting in the Environment tab. 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Environment tab. 

3. Press the Add button. 

4. Enter the Variable to be created. Let's enter Initials. 

6. The String will contain the value to assign to the variable. Enter the 
dynamic variable that contains these initials, $lnitials. 

6. The Validation Logic Type should be set to Group Membership and 
Value to Sales for all users in the Sales group. 

The Environment Settings dialog box should look similar to the follow- 
ing dialog box: 



Chapter 4 - Tutorial 



53 



Environment Settings 



Variable^ 
Initials 



Siring 



Validation Logic 
Type 



$lnitials 



Value 

I Group Membership ji^ [ j Sales 



mm 



■ Class^ 



g Desktop •. 
M Notebook > 
M Tablet PC 

Ei Ti"ermiSBr?*ICIrent^ 
D MfemfeerrSenYeff 
10 ©WWl^n&iBilleR 



.OS ^ . . 

Jil 98 O 2QQQ; 

D WM 



• Connection 5 
0 LAN 
jgl Dial-up 



Description: 



OK 



,1 ' Cancel, 



7. Press the OK button to save the new settings. 

The batch file that will be used to start the CRM will utilize this envlronnnent 
variable as shown below. The Initials environment variable is enclosed within 
percent (%) symbols. 

CRM .R AT 

CRM %Initials% 

Be sure to Save and Replicate these changes when all configurations are 
complete. 
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Lesson 8: Updating Search Paths 

In order to make sure that all CRM files are found, a search path will be 
added to each user's environment. A search path Is appended to the end of 
the client's existing path. 

►To ensure that all CRM files can be found, add the Path as follows: 

1 . Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Path tab. 

3. Press the Add button. 

4. Enter the path, T:\TM. 

5. Now for the Validation Logic. Since only the salespeople have the need 
to run the CRM. we will only use this path for the Sales group. Specify 
the Validation Type of Group Membership and the Value to Sales. 

The Path Settings dialog box should look similar to the following: 



Path Settings 



i; TATM 



'SI 



-Validation Logia 
Type 



- Value . 

Group Membership iSi|Sales 



Desktop i , _ 
f^' Notebook/^ 
R Tablet 

E^' Tfefm:Serv>£lient : 
C; fvferoberr Server 
Domain ContrGlFer 





















1 r,S:We 










w 















Gonnection- 
Dial-up 



(j, T Description 



6 Press the OK button to save the settings. Press the OK button again to 
return to ScriptLogic's main window. 

Be sure to Save and Replicate these changes when all configurations are 
complete. 
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Lesson 9: Creating Desktop Shortcuts 

Now that the environment variable and batch file exists to execute the CRM 
application, Jim can create a desktop shortcut to provide a simple way for 
the salespeople to run the application. The shortcut will be available to all 
salespeople. 

► Creating the Shortcut is simple. 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Shortcuts tab. 

3. Press the Add button. 

4. Select Create Shortcut from the Action drop-down list. 

5. Specify the text for the shortcut (Shortcut Name) next. Enter CRM. 

6. Select User Desktop from the Shortcut Location drop-down list. 

7. The Target specifies the drive, folder and application name that the 
shortcut will run. We will specify T:\TM\CRM.BAT. This folder must be a 
shared folder that the Sales group has access to. 

8. In this scenario, there are no arguments to pass since our batch file is 
doing it for us. Leave the Arguments field blank. 

9. Leave the Start In, Run, Icon File, Shortcut Key and Overwrite 

options at their default values. For additional information on these 
entries, press the F1 key for help. 

10. Now for the Validation Logic. This setting is Important as we only want 
the Sales group to have this shortcut on their desktop. Specify Group 
Membership for the Validation Type and Sales for the Validation Value. 
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The Shortcut Settings dialog box should look similar to the following: 



shortcut Settings 



AGtion^ [ Create S hortcut l l| O- Overwrite 



Shortcut Name jTeleMagic 



|T:\TM\TM.BAT 



Shortcut Location jUser Desktop 

Target 
Target Arguments. 

Start In 
Shortcut Comment 
J * ' Icon^File 



if^y Index 



Shortcut'KeyJNone 



p ValidatiQn4Qgic ^>— — 
Ti>pe 



Run Window |Normal^ [£][ 



Value 



] Gjroup Membership W\ ' Sales 
|^CIass=: 



gf Desktap;:^' ' 

5:1 Notebook-? 
^F:! Tablet PC 
' rZj Terrn, Serjv;CI{eiTit 

Q M:embe^Serverr f 



S 95^/ '^^dl Ni|.; 



-Copnection^s?:] 
J^/Dial-up . 




12. Press the OK button to save the settings. Press the OK button again to 
return to ScriptLogic's main window. 

Be sure to Save and Replicate these changes when all configurations are 
complete. 
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Another way this shortcut could be created Is without the use of the CRM 
batch file. Here are the steps: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Shortcuts tab. 

3. Press the Add button. 

4. Select Create Shortcut irom the Action drop-down list. 

5. Specify the text for the shortcut (Shortcut Name) next. Enter CRM. 

6. Select User Desktop from the Shortcut Location drop-down list. 

<$>7. The Target specifies the drive, folder and application name that the 
shortcut will run. We will specify T:\TM\CRM.EXE. 

In comparison with the batch file, the Target specifies the application 
directly instead of the batch file. 

^8. In order to pass the TM application the initials, enter %%lnitials%% (be 
sure to type in both sets of percent symbols) in the Arguments field. 

The argument is now the Initials environment variable. 

9. Leave the Start In, Run, Icon File, Shortcut Key and Overwrite 

options at their default values. 

10. Now for the Validation Logic. This setting is important as we only want 
the Sales group to have this shortcut on their desktop. Specify Group 
Membership for the Validation Type and Sales for the Validation Value. 
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The Shortcut Settings dialog box should look similar to the following: 



J 



Shortcut Settings 



Create Shortcut ij^ 


' ■ ^ D p vef write ^ 


" TeleMagic jl 


User Desktop 




^\ 


^Itatmmm.exe I 





;{ ' [ Start fn 

x 

j; Shortcut Comment 
i! , Icon File 



Iflsil Index 
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~ Validation ^Logtc?=: 
Types 
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Wj. Desktop 

Notebook 
g Tablet P,C. , . 

fvfem6e(|Serve5, 
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-'Connection -1 



JErDialV^^ 



;1 ^ , 



;:%scri(3tioh;: 



OKI 



'Cancel.. 



12. Press the OK button to save the settings. 

Be sure to Save and Replicate these changes when all configurations are 
complete. 
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All employees at Allied Marketing have access to the internet using Internet 
Explorer. The following settings are used in ScriptLogic to present each user 
with a start page and a common download directory. 

► To configure the Internet Settings: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Internet tab. 

3. Press the Add button. 

4. Enter the address for the company's web site for the Start Page, 
www.alliedmarketihg. com. 

5. Enter the directory to be used as the default for downloaded files, H:\My 
Downloads. Remember that H has been previously mapped as the users 
home directory. During Folder Redirection, any non-existent folders are 
automatically created. 

6. Set the default Validation Logic Type to Group Membership and Value 
to *for all groups. 
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The Internet Settings dialog box should look like the following: 



Internet Settings 



Slart f?age 
: Search Page J 



http: //www. alliedmarkeHng. com 



DownloadiDb 
II Oi Use a- proxy server 
-Address: 



H:\My Downloads 



} Port: 



Do nptuset proxy sery'er for:acldresses,beginning.witli: ; ■ 



1 Address of automatic configuration script: 



7=fV;aJidati0n4Qgie- 



Valua, 



Group Membership 



tS Desktop ^' 
f0 Notebook 
@ Tabletfe ' ) 
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7, Press the OK button. 

Be sure to Save and Replicate these changes when all configurations are 
complete. 
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Lesson 11: Replication and Testing 

Now that all of the configurations have been entered into the ScriptLogic 
. Manager, it is time to replicate the data. Once the data has been replicated, 
testing can begin. 

You will notice an LED on the bottom of the ScriptLogic IVIanager main 
dialog box. This LED will be either Red, Yellow or Green. If the LED is Red, 
you must save all configuration information. A Yellow LED indicates that ail 
changes have been saved, and the data is ready to be replicated. A Green 
LED shows that all configuration information has been saved and replicated. 

To save the configuration information, press the Save Changes button from 

the ScriptLogic Manager main dialog box. 

To replicate the data, press the Replicate Changes button from the 
ScriptLogic Manager main dialog box. 

Once all information is successfully saved and replicated, it is time to test 
the configurations. We have made special settings for the Accounting and 
Sales departments. Our testing should include logging in as several different 
users. First, log in as a user from a department other than the Sales or Acctg 
departments. You should find the S drive mapping to the CommonFiles 
folder and the H drive mapping to the user's home directory. A Mail profile 
should have been created for the user. Test this by checking their connection 
to the Exchange mailbox. Intemet Explorer for this user should go to the 
company's web site as the home page for Explorer. Internet Explorer should 
behave in the same manner for all users. 

Logging in as a user from the Sales department, you should see drive S and 
H mapped, as well as drive T. The Sales_Laser printer should also be 
mapped. The user should have a Mail profile, several environment variables 
and a shortcut on their desktop for the CRM. 

Users from the Accounting department will also find drives S and H mapped 
as will as the Acctg.Laser printer and a Mail profile. 

If there were any problems with these configurations, go back to the lesson 
that describes the necessary actions and confirm all settings. 
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Summary 

e a 

I if 

Congratulations! You have completed the first tutorial. 

This tutorial has demonstrated how ScriptLogic can make a difference even 
when applied to a small company. We have taken a non-networked environ- 
ment and simply and easily turned it into a productive and self-managing 
network. 

The next tutorial will show the use of ScriptLogic in an environment that has 
an existing network. Current logon scripts are batch files which will be 
translated into ScriptLogic configurations. These settings will then be en- 
hanced to demonstrate several features of ScriptLogic. 
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Case Study 2 - Way2Go Travel Agency 



The Company 

This case study describes a hypothetical company called The Way2Go 
Travel Agency, located in Ft. Lauderdale, Florida, The Way2Go Travel 
Agency maintains a staff of approximately 100 employees. The company 
consists of several departments including Sales and Customer Service. You 
are the company's newly hired network administrator. Your job is to migrate 
the company's existing batch file logon scripts to ScriptLogic. After this 
migration is complete, ScriptLogic will be used to further modify the client 
environment. 

As you can see by the following network layout, this organization's network 
consists of a single NT domain (named WAY2G0) supported by two NT 
domain controllers, Diamond, a Print server (PDC), and Sapphire, a File 
server (BDC). The network also has a member server that is used as the 
Exchange mail server (Ruby). ScriptLogic is installed on the primary domain 
controller. Each server consists of a single RAID-5 drive array containing 3 
logical partitions. There is a system partition (C:) of 3Gb, which contains the 
system files and folders, a dedicated volume for the paging file (D:) of 1Gb, 
and a data partition (E:) of 14Gb. Ail partitions are formatted with the NTFS 
file system. There is also a UNIX Host connected to this network. 

Home directories are configured for all users in the User Manager for 
Domains (UMD) applet. They are mapped to drive H:. The home directory 

location specified in UMD is \\Sapphire\Users\%UserName%. 

Each department has its own dedicated HP 4000 LaserJet printer. The 
workstations connected to the network consist of Windows 9x, Windows NT 
and Windows 2000 operating systems. Each workstation is assigned a name 
using a simple naming convention that defines which department the com- 
puter belongs to and the workstation number within the department. 

For example: 

• ACC-001, Accounting department. Workstation 1 

• CS-005, Customer Service department, Workstation 5 



SAL-001 , Sales department, Workstation 1 
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The following network layout depicts an overview of the network at the 
Way2Go Travel Agency. 



Domain for the Way2Go Travel Agency 
(WAY2G0) 



All servers consist of a 
single RAID-5 drive anray 
(3 partitiDfii?) 
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The following is a sampling of the directory structure on the Sapphire server: 

(E:) 

j B- S Data 
I h '® Acctg 

CustSrvc 

• I Mis 
I "® Sales 
Shared 
{jl"® Program Files 
| Programs 
I i-'fi Temp 
1 El"@) Users 
j I i- BSmith 
I i--^ G Jones 
IHughs 
I KMcGovern 
|--@ M Ferguson 
TWilliams 



The following is a sampling of the directory structure on the Diamond server 



e-i^ (E:) 

h@l Archive 
Installs 
I \-'^ Apps 
I j-Sl Drivers 
j B-Sl Windows 
i W2k 
i j \-m Spl 
i ! h'Si Sp2 

i i ^--lo Sp3 

| "H W98 
^•-ai Wnt 
iil -ftl Program Files 
fil-fi Temp 
l±l"@ Winnt 
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The existing logon scripts are implemented using a single batch file per 
department. At the end of each department's logon script, a common logon 
script {COMMON.BATj is called. The common script processes commands 
that are common to all users. The sample logon scripts shown below are two 
examples of individual department logon scripts. There are several other 
logon scripts in this environment, one for each department in the company. 

A CCTG . BAT 
©ECHO OFF 

NET USE G: \\SAPPHIRE\ACCTG 

NET USE LPT2: \\SAPPHIRE\ACCTG_HP4000 

CALL COMMON.BAT 



SA I F S . BAT 
@ECHO OFF 

NET USE G: WSAPPHIREXSALES 

NET USE LPT2: \\SAPPHIRE\SALES_HP4000 

CALL COMMON.BAT 

COMMON.BAT 

@ECHO OFF 

NET USE H: /HOME 

NET USE I: WOIAMONDX INSTALLS 

NET USE S: WSAPPHIREXSHARED 

NET USE P: WSAPPHIRENPROGRAMS 

SET VT100EMPATH=P:\VT100EMU 

SET VT100EMH0ST:=192. 168. 100.12 

SET VT100EMPRN=LPT2: 
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Lesson Overview 

The first set of lessons will demonstrate how to effectively set up the Script- 
Logic Manager's working environment by: 

• defining default ScriptLogic preferences. 

• configuring Server Manager. 

The second set of lessons will examine the necessary steps to take when 
migrating to ScriptLogic from batch logon scripts. These lessons will draw 
conclusions from the Way2Go Travel Agency's batch file logon scripts. The 
migration issues include: 

• mapping drives. 

• configuring printer mappings. 

• setting environment variables. 

• assigning logon scripts. 

Following the migration of the existing batch file logon scripts, the lessons 
will demonstrate how to take ScriptLogic a step further. We will discuss 
several ways in which ScriptLogic can extend the client's working environ- 
ment and produce a more efficient and organized working environment. 
These lessons include: 

• root mapping home directories, 

• defining default paths for MS Office, 

• configuring Mail profiles, 

• launching an application at the end of the logon process, 

• configuring registry settings, 

• configuring Internet settings, 

• automatically installing a service pack, 

• displaying a company wide legal notice, 

• displaying a custom company logo during the logon process, and 

• updating the network with a new domain controller. 
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Initializing the ScriptLogic Environment 

Following the installation of ScriptLogic (detailed information regarding the 
installation of ScriptLogic can be found in Chapter 2, Installing ScriptLogic), 
the Global Options, Profile Options, Profile Manager and Preferences should 
be customized for your organization. 

The Global Options define customized settings that are used for all users 

executing the SLOGIC logon script. The system preferences provide for 
default descriptions, file paths and settings for miscellaneous prompts. 

The Profile Options and Profile Manager allow the configuration of the 
default profile as well as the ability to add new profiles. Since the Way2Go 
Travel Agency exists in a single location and will have an average number of 
configuration entries in ScriptLogic, a single profile will be used in the 
ScriptLogic Manager to handle the company's needs. ScriptLogic comes with 
a default profile which may be used right away or configured to meet certain 
specifications. Additional profiles may be added when necessary. 

The Server Manager should also be configured. It is essential to have the 
managers configured correctly before getting started. If they are not config- 
ured correctly, the users may not receive the most current ScriptLogic 
settings when they log on to the network. 
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Lesson 1: Set Default Preferences 

Since ScriptLogic has just been installed, it makes sense to start by configur- 
ing the default preferences. 

The Manager Preferences dialog box (File ^ Preferences) defines default 
values for several common fields used throughout the manager as well as a 
default configuration description, file paths and Manager startup options. 
Modify these preferences as needed. 

The Default Description is stored to each new client configuration entry in 
the Manager. Way2Go will use this description to save the userid of the user 
adding the configuration entry. 

>To configure the Default Description: 

1. Select the Edit tab and provide the following default description in the 
Default Description field. 

Created by $Usend 

The ScriptLogic install creates an Initial profile which will house all client 
configuration settings. Multiple profiles may be used to break up and valida- 
tion different client configuration settings. 

Setting the profiles validation logic is the next step. These validation logic 
settings provide a base that all client configurations will use. If a specific 
option is turned off in the profile's validation logic, it will not be available for 
use in any client configuration setting for the profile. 

>To configure the Profile's Validation logic: 

1. Press the Profile Manager button from the Manager's main dialog box. 

2. Select the specific profile to be modified. For the purposes of this tutorial 
there will only be a single profile called SLP0001. Highlight this profile 
and press the Modify button. 

3. Since Way2Go does not have any Terminal Server Clients in use, the 
first logical step is to uncheck these options in the default dialog box. 

Uncheck the Term Serv Client Class check box. Member Server and 
Domain Controller should be unchecked by default. 

Check all of the Operating System boxes. 

Leave both Connection types checked. 

4. Press the OK button to save the profiles options. 

All new client configuration entries will adhere to these validation logic 
rules. All unmarked settings will be disabled, preventing the use of them 
in the validation logic. 
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Another common default setting is the Validation Logic defaults. This can be 
found on the Default Validation tab of the Profile Options dialog. Setting up 
validation defaults here will make your job of configuring ScriptLogic easier. 
Once the logic is defined, it will not have to be defined again for each new 
configuration, unless further rules are required. 

► Configure the default validation logic as follows: 

1. Press the Profile Options button from the ScriptLogic Manager main 
dialog box and select the Default Validation tab. 

2. Term Serv Client Class, Member Server and Domain Controller should 
be disabled since we deselected them in the Profile Manager settings. 
Make sure ail other classes are selected. 

Leave all Operating Systems checked. Set the Validation Type to Group 

Membership and Value to * (asterisk). 

Leave both Connection types checked. 

Whenever a configuration is created in any of the Client Configuration 
dialog boxes, these validation logic rules will automatically be applied 
first, as the default. They may be overridden in any of the individual 
configuration dialog boxes. 

The Default Validation dialog box should look similar to the following: 



■^yajlciarion: Logics 
Type 



Group Membership 



HE 



Value 



Glass- 



^1 Desktop < ' ^ 
g'Npteti^^^^ _ 

Q Term^ Serv^ Client ' 
D M ember S erver^ 
O Domain Controller 



■ OS 1;..-. ^ 

ig950B NT 
pli 98 ^ R' 2000. 

"^"fi2003: 



-Connections 
M Di'alfup 



3. Press the OK button to save the default preferences. Unlike most of the 
configurations in ScriptLogic, the Manager Preferences will take effect 
immediately after the dialog box is closed. 



These default settings will only affect new configurations added to the 
Manager. Any existing configurations will not be changed. 
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Lesson 2: Server Manager Setup 

Server Manager is used to configure Replication and manage the Script- 
Logic service. 

Replication is the act of duplicating information from one defined location to 
another. ScriptLogic uses replication to copy the ScriptLogic configurations 
to all domain controllers. These domain controllers must be defined in the 
Server Manager. By default, these are defined during the install of Script- 
Logic. However, if this list is incorrect or a domain controller has been added 
to or removed from the network, it must be updated. 

ScriptLogic utilizes a service, called the ScriptLogic service, to provide the 
ability to perform tasks that require administrative rights without sacrificing 
user-level security at the workstation. 

Server Manager monitors the status of this service on all domain controllers. 
Confirm that this service is started on one or more servers. 

To confirm the list of servers, press the Server Manager button from the 
ScriptLogic Manager main dialog box. If necessary, press the Add or Re- 
move button to modify the list. Pressing the Discover button will query the 
domain for all domain controllers. The domain controllers are displayed, 
showing the status of each service. 

Each Domain Controller that will host the ScriptLogic configuration files 
should have the Target box checked in Sen/er Manager. However, not every 
Domain Controller must be a target If NT40 Directory Replication Services 
are being used, just set one server as a target. NT Replication will handle 
the rest 

The Service Requests column indicates whether the ScriptLogic service will 
either grant or deny service requests for elevated privileges that come from 
ScriptLogic when it is executed from the target path on the listed server. You 
can control the behavior of the ScriptLogic service during logon and config- 
ure it to only allow elevated privileges to be granted when ScriptLogic has 
been executed from an approved location. 

The Way2Go Travel Agency has the following Server Manager setup: 



ScriptLogic Server Manager -WAVSGQ 














m 






12 


i DIAMOND 10 1^ 03/20/2003 12:22 


Granted lO Started 
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g SAPPHIRE [0 i<i> 03/20/2003 1 2:22 


IQ Granted Started 


i 
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Migration Steps 

The following set of lessons directly relate to the migration of your existing 
logon scripts into ScriptLogic. 

1 . The first step in migrating your batch file logon scripts to ScriptLogic is to 
evaluate them. By evaluating these scripts, you will determine the 
desired settings that will be duplicated in ScriptLogic. 

Your evaluation of the scripts defined for the Way2Go Travel Agency at 
the start of this study should yield the following conclusions: 

a) Each user is mapped to a common shared folder using drive 
letter S:. 

b) Each user is mapped to a shared folder that is shared by the 
members of their own department This folder is mapped as 
drive letter G:. 

c) Each user is mapped to drive letter P: for access to common 
applications. 

d) Each user is mapped to drive letter 1: for access to the latest 
installs including service packs. 

e) Each user has a Home Directory that is mapped to drive letter 
H:. 

f) Each user has three environment variables declared for the 
VT100 emulation application. 

g) Each user has LPT2: mapped to the printer designated for use 
by their own department. 

2. Once you have determined which settings need to be implemented in 
ScriptLogic, you can begin to configure ScriptLogic. With our list of 
settings, you will notice that the first five settings all involve drive map- 
pings. This is where we will start. 

3. Each setting entered into the Client Configuration dialog box should be 
thoroughly tested before implementing the setting for ail intended users. 

The following steps should be taken when testing a new ScriptLogic 
configuration: 

a) Enter the new ScriptLogic setting and set the validation logic to 
UserName. Test the setting for a single user. Save and Replicate 
the change. Verify that the new setting provides the desired' 
results for the specific user. 
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b) Once the setting is verified for the specific user, change the 
ScriptLogic validation logic to include a more broad range of 
users, such as a specific group. Based on the particular configu- 
ration, this intermediate step may not be needed. Save and 
Replicate the change. Verify that the new setting again provides 
the expected results for the specific group. 

c) Finally, change the validation logic for the new ScriptLogic 
setting to include all intended users/computers. Be sure to Save 
and Replicate the changes again. Each intended user will be 
affected the next time they log onto the network. 




Remember, no configurations will be applied until the user's 
logon script is assigned as SLOGIC and the newly created 
ScriptLogic settings are replicated to all authenticating servers. 



Let's start the migration by entering the client configurations. These 
configurations are made in the Client Configuration dialog box. 
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Lesson 3: Drive Mapping 

Mapping drives provides easy access to commonly used folders. Mapped 
drives commonly point to folders on the file server When mapping a drive, a 
local drive letter is assigned to a specific folder on the network. 

As the network administrator, you look over the list of drive mappings that 
must be set up. You decide that the first drive mapping to be configured in 
ScriptLogic will be drive S:, a shared folder that all users have access to. 
Looking back at the batch logon script {COMMON.BAJ), we see that S: is 
mapped to \\Sapphire\Shared 

► To implement the drive mapping in ScriptLogic: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Drives tab. 

3. Press the Add button. 

4. Choose drive letter S from the Letter drop-down list. 

5. Specify the folder that the drive will be mapped to in the Shared Folder 
field. In this case, it is \\Sapphire\Shared. 

6. For testing purposes, set the Validation Type to User Name and Value 
to a specific user id. The validation logic's Class, OS and Connection 
should already be set to the defaults defined in Lesson 1. 
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The Drive Settings dialog box will look like the following: 



Drive Settings 



Letter 



Path 



\\Sapphire\Shared 



O Hide from Wiridows Explorer* 
Explorer LabeKgQQQ^and newer] 



On Error . 



Continue 



= Validation Logic - 
Type . 



Value 



User Name 



fpClass - - ^ — 

g-Desktop ^ ' 
Jgj Notebook ' 
Jgf tablet PE 
1^; fefmiS;ef,v pieg^;^ 
Q f^fernjaef, S err-^err 
O f^^rnajroCQifitmte 



98 ' g 2000 
'&Me JZ;XP 

. ^ . • El 2003 



tonnectiorjpni 
; Dial-up 



Description;-' 



7. Press the OK button to save the new settings. 

Following the previous set of tasks, map drive P: to \\Sapphire\Programs and 
drive /; to WDiamondllnstalls. Be sure to test these settings on a single user 
before setting the validation logic to all groups. 
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The Drive Settings dialog boxes for drives P and I should look like the 
foliowing: 



Drive Settings 



letter -Palh 



P K WSapphireVPrograms 



D! Hide from Windows^Bplbrer 
Expidrer Label (2008; and newer) 



0n Errors 



Continue 



= Validation Logic? 



Value 



Group MembersNp 



IS 



^ Class — ^r.- 

SI Desktop 
igl Notebook 
Ei Tablet PC 
j3l Ferjrn, S ery; Clfejit 
Ol Number) ^eijyerf ' 



pOS 11.= = 

!g,9a li|20oo 

gMb SXP 
H 2003 



p Connection = 

' Klan 

Si Dial-up" 



Description 



itiriEz: 



Cancel 



Drive P 
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Drive Settings 



Letter Path 



I n\Diamond\lnskalIs 



Ij! Hide from Windows Explorer 
Expiorer Label [2QQ0^and newer] 



On Error 




Description' 



Drivel 
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At this point, we have successfully mapped three drives: S, P, and !. These 
drives each point to a shared folder which all users have access to. 

The next drive mapping we will configure is drive letter G. This will point to a 
folder that is shared by a single group (department). Each department has its 
own shared folder. The folder exists under \\Sapphire\Data\. 

> To add the drive mapping: 

1 . From the Drives tab in the Client Configuration main dialog box, press . 
the Add button. 

2. Choose drive letter G from the Letter drop-down list. 

3. Type the UNO of the share that the drive will be mapped to in the 
Shared Folder field. In this case, the drive will be mapped to the 
department's share under \\Sapphire\Acctg. 

The drive mapping for the Sales department will use the 

\\Sapphire\Sales share. 

4. The Validation Logic should be set to Group Membership. Specify the 
specific department under the Group Membership validation Value. For 
example, specify the Sales group (Sales) for the Sales department, 
Acctg for the Accounting department. 

An entry will be made in the Drives tab for each department. Based on our 
sample scripts, we will create two entries: one for the Accounting group and 
one for the Sales group. 



ScriptLogic G tting Started 



The Drive Settings for the Accounting and Sales departments dialog boxes 
will look like the following: 



Drive Settings 



Letter' Path 



G K j jWSapphireVAcctg 



C Hide from Windows Explorer 
Explorer Label (2000 and newer)' 



On Error 



Continue 



^Validation Logic- 
Type' ' . 



Group Membership 



IFllAcctg^ 



Class— ■^..—^■^ 


pOS— -| 


Jv5' Desktop 




.}7-NoteBook ^ 1 


^ 'Et98/ j?]i20G0' 


tablet PC 






rfo .E'2oo3 


:0^i^%]n6eaSeryerj \ 









•Connection- 
g LAN , 
p'Dial-up:' 



^; .Description^ 



jf.ii,. Cancel 



Accounting Departnnent 
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Drive Settings v W'i 



Uiiev Path 



6 F 



\\5dpphire\Sales 



D| H ide from Windows Exploreri 
Explorer Isabel [2000 and^newefji: 



On Euoi 
\ Continue ['y | 



I p Validation LpQic" 
Type 



Value 



{Group Membership 



Sales 



g Desktop 

Notebook 
0 Tablet PC 

0 Trerm SsrfV^Cfient 
lijj fvfembert Servers - 

01 &CTaife)&3Pi^I^ller 



rOS— 

38^; 
I3rMe! 



B 2000 
E^XP 
g 2003 



p Connection 
Ej Dial-up 




Sales Department 
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Now ifs time to configure the user's home directories. User IVianager for 
Domains (Dm) has each user set up with a home directory location The 
dnve IS set to /and the location is set to \\Sapphire\Users\%UserName% 



I 


-Home Diredori^«= 








; Q LoealPatkj 








, (?T Conheet H: i' 


3[ To |\\SapphireMJsers$\^username^ 











► Setting up this drive mapping is simple. 

1. From the Drives tab in the Client Configuration dialog box, press the 
Add button. 

2. Choose drive letter Hfrom the Letter drop-down list. 

3. Specify the folder that the drive will be mapped to in the Shared Folder 
field In this case, the drive will be mapped to the users home directory 
on $HomePath. 

4. The Validation Type should be set to Group Membership and the Value 

to * (asterisk). 

The Drive Settings dialog box should look like the following for the 
Way2Go Travel Agency's home directory drive mapping: 
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Drive Settings^ 



mam 



Letter Path • ' , - 

lljL iJ^t i j ^^^^ omeS erver\$H omeD ir$$ 



Q Hide From Windows Explorer 
Explorer Label [2000 and^newer) 



On Error 



I Continue 



= Validation Logic 
Type: 



Value 



iDomain 



11 



Class 3 

1 13} Desktop 


os=- 

; a' 95 ; 


Mi NJ 


i S Notebook 


: (^'98 


R' 2000 


Tablet PC 


' Ri. Me 


E)XP 


1 0 Trerrir>, Saw' Client 




gp .2003 


Q N^e^^iberr Server 




1 Hji {IfGrnatnXontrQijer 







r= Connection - 
Dial-up 



Description 



OK 



' CaneeL 



5. Press the OK button to save the new settings. 
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Lesson 4: Mapping Printers 

In our sample scripts, each user has a network printer mapped to their LPT2: 
port. There is one network printer allocated to each department. 

► Let* s continue with capturing our printers. 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Printers tab. 

3. Press the Add button. 

4. Select Network Printer as the Printer Type. 

5. Specify the printer in the Shared Printer field. It should be specified in 
the form of \\server\printer. For our example, specify 
\\Sapphire\ACCTG_HP4000. 

6. Select a port number from the Port drop-down list. This port will be used 
for the printer mapping. Lef s select port two (2) to match our batch file 
logon scripts. 

7. In the NT/2000/XP Clients Only box, select Add ixom the Auto add/ 
remove drop-down list. This will automatically add the print driver to the 
workstation if it does not already exist. 

8. Set the Validation Logic Type for Group Membership and the Value to 
Acctg, This printer mapping will be set for all users in the Accounting 
group. 
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The Printer Settings dialog box should be similar to the following: 



Printer Settings 



Printer Type: 



1 Network Printer 



Shared printer 



V\SapphireVACCTG^HP4000 



0 



Advanced 



• Capture- 
LPTtt^ 



2 



NT72000/XP clients only- 
Autoadd/remove" 



ri Set as: default' 



S El<3i f^o^' capture. ^ oi? |et auf Qradded] fannt^j a;^ default;, if 
' ■ tslietjit- l^aJajloGal prijntec dyftj^eCopj ^fj: 

f Validation. Logic — - — ^ 

Type 



Value 



Group Membership jAcctg 



Class-^-^^^-^^ — 

Desktop. 
jS) Notebook 
gjablet PC.' 
□[ Ifernn/Serv^ Oiemt^ 
n! fjdeiTtlpefi'terweri 
O OlomaiitijfcQntrQleri 



□S = 



0 95 fgl NT 

gMe 0.XP 
12) 2003 



r?^(£onnect!on- 
IgLAN 
S Dial-up 



|| Description 



Cancel 



8. Press the OK button to save the new setting. 
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Define another printer for the Sales department. Use LPT# 2. and Share 
Printer \\Sapphire\SALES_HP4000, 

The Printer Settings dialog box should be similar to the following: 



Printer Settings 



Printer Type 



( Network Pf inter 



Shared printer 



\\Sapphire\SALES_HP4000. 



0 . 0 . \: 0/ 



-Capture^ 
' LPTfr 



NT/2000/XP clients only 
Auto addAemove^i , . - , - ' 

Add igi □fSet^asdefWlt^l 



I .jR;' Do-mot capture- LPT 1,. or set autG-addedi|t#^^ 

[ r ^ cta'.ha£a'lqGaJ f^rintef defined oay?lC7~ ' ~ ' 

-Validation Logic- 
Type 



Value 



I Group Membership jKl|Sales 



P Class ---- '^-^ ; |i p-os -^ — — ^^'-^ p Connectioh^-^^ 

E; LAN ' ' 
FrBialrup- 



ig Desktop ^ 
Fj^Nplebook'\i ■ *J 
IgjJabletpC. } 



FJNT 
Sp: )7j 2000 

:i4: ' IE] 2ooa 



: Description 



IjR ¥CancelLfi. 



Press the OK button twice to return to save the new settings and return 
to ScriptLogic's main dialog box. 

9x workstations do not have the necessary APIs to automati- . 
cally install a printer. Printer ports can be redirected for 9x 
workstations. 
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The final step in our migration is to define the environment variables used 
for the VT100 emulation application. Looking back at our sample logon 
scripts, we see that there are three variables. VT100EMPATH, 
VT100EMHOST, and VT100EMPRN that must be configured with 
ScriptLogic. 

► We can easily define these settings in the Environment tab. 

Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 



1. 

•2. 
3. 
4. 

5. 



Select the Environment tab. 
Press the Add button. 

Enter the Variable to be created. Let's enter VT100EMPATH. 

The String will contain the value to assign to the variable. Enter 
P:\VT100EMU. Remember that we mapped drive P to 
\\Sapphire\Programs in lesson 3. 

The Validation Type should be set to Group Membership and a Value of 

* (asterisk) for all users. 

The Environment Settings dialog box should look similar to the follow- 
ing: 



Environment Settings 



\/ariable^ 



String 



VT100EMPATH 



PAVTIOOEMU 



^Validation Logic 



Group Membership 



1^ 



Value; 



r Class ^^^7 ^-^ 

E! Desktop 
j0i Notebook 
@ Tablet RC., 

D H^aifierjt.eryer, 
Q BoraaijfcSQf^trMer 



.QS ^-i^ : 

!2]95 ^gNT ' 
@98^ g 2000 

BMe^aXP 
^ lil 2003 



'|f Connection^ 
M Dialtupr 



■Description 



OK 



Cancel 
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7. Press the OK button to save the new settings. 

8. The next variable to define is VT100EMHOST Set this to 

192. 168. 100. 12. Set the Vaiidation Type to Group Membership and the 
Value to * (asterisk) for all users. 

The Environment Settings dialog box should look similar to the follow- 
ing: 



Environment Settings 



Variable. 



V T100EMHOST jj - 



192.168.100.12 



' [p Validation- tbgic- 



Value. 



I Group Membership 



Glass 

g'Desktop 
'p!j Notebook 
@ TabletPC 

CI lerm-ger^^Elieijib:^ 
JO Member Server? 



^BS >^ 

gilNT ' 
@'98 0 2000 
B Me XP . 

fej; 2003-. 



pConnectiorif 
; Dialrup^ 



Ejescription^ 



Cancel' - 



9. Press the OK button to save the new settings. 

10. The next variable to define is VT100EMPRN. Set this to LPT2:. Set the 
Validation Type to Group Memberslnip and the Value to * (asterisi<) for 
all users. This setting takes advantage of the previously defined printer 
mapping. Remember that LPT2: is mapped to each user's departmental 
printer as defined in lesson 4. 
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The Environment Settings dialog box should took similar to the follow- 
ing: 



Vafiable 

I vtiooemprnT 



Siring 



LPT2: 



J 



pValidadon Logiq'f 
Tvpe 



Value 



Group Membership 



m 



Class —T-— -— — ~ 
B Desktop 
S Notebook 
g Tabtet'PD 

□ Trerrn.Ser^^Elienb 
Q iyijerribefr Sfefiver 



gas g NT ■ 
M 98 g 2G0Q- 
gMe BXP 
J3 2003 



rConnedion- 
i @ Diahup 



DesGriptibn; vl 



. Cancel ; 



11. Press the OK button to save the settings. 

12. Press the OK button to return to the ScriptLogic Manager main dialog 
box. 

It's now time to save and replicate our settings. Once this is done, we can 
assign the ScriptLogic logon script to our users and test out the configura- 
tions. Lessons 6 and 7 will show you how. 
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Lesson 6: Assigning a Logon Script 

Now that all configurations are entered, they must be tested. To test the 
settings, the SLOGIC logon script must be assigned to the users. Assigning 
this logon script to any user will cause ScriptLogic to execute during the 
logon process instead of the former batch logon scripts. Before assigning the 
SLOGIC logon script to all users, it is best to assign it to one or two users for 
testing purposes. Once all settings are confirmed to be working, the logon 
script can be assigned to all users. 

The SLOGIC logon script may be assigned to each user using UMD or from 
within the Assign Logon Script dialog box. 

> To assign the logon script from within ScriptLogic: 

1 . Press the Assign Logon Script button from the ScriptLogic Manager 
main dialog box. This opens the Assign Logon Script dialog box. 

2. This dialog lists all users. Using Windows standard tagging techniques, 
select each user that will be assigned the SLOGIC logon script. Remem- 
ber, before assigning the logon script to all users, test the settings with 
one or two users first. 

3. Press the Assign Logon Script button to assign the ScriptLogic logon 
script. 

The next time each user logs onto the network, the ScriptLogic logon script 
will be executed. 
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Lesson 7: Replication and Testing 

Now that all of the configurations have been entered into the ScriptLogic 
Manager, it is tinne to replicate the data. Once the data has been replicated, 
testing can begin. 

At this point, you will notice an LED located on the ScriptLogic Manager 
main dialog box. This LED will be either Red, Yellow or Green. If the LED is 
Red, you must save all configuration information. A Yellow LED indicates 
that all changes have been saved, and the data is ready to be replicated. A 
Green LED shows that all configuration information has been saved and 
replicated. 

To save the configuration information, press the Save Changes button from 
the ScriptLogic Manager main dialog box. 

To replicate the data, press the Replicate Changes button from the 
ScriptLogic Manager main dialog box. Data will be replicated to all domain 
controllers specified as a target in Server Manager. 

Once all information is successfully saved and replicated, it is time to test 
the configurations. Testing should begin with a single user. Assign the 
SLOGIC logon script to this single user. Once the user logs onto the network, 
they should see the settings assigned to them. 

Next, log on as a user from a group for which specialized settings have been 
made. In our examples here, we have created special settings for users in 
the Sales and Acctg groups. Logging on as a user in either of these groups 
will yield mapped drives for S, G, P, I and H as well as printers and environ- 
ment variables. 

If there are any problems with these configurations, go back to the lesson 
that describes the necessary actions and confirm all settings. Once these 
settings are correct, follow lesson 6 again to assign all users the SLOGIC 
logon script. 

Congratulations! You have completed the migration of your batch 
logon scripts. 

This completes our migration of the batch file logon scripts into ScriptLogic. 
At this point, the batch file logon scripts may be removed from the system. 
All users should be assigned the SLOGIC logon script. They will execute 
ScriptLogic upon logon and should have the same drive mappings, environ- 
ment variables and printers as they did before migrating to ScriptLogic. 
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Extending the use of ScriptLogic 

Now that you have successfully emulated the company's working environ- 
ment using ScriptLogic, it's time to move ahead and implement several 
other useful features of the product. 

You can now take control of the network. Make use of home directories by 
redirecting several common flies and folders to their location. This can be 
accomplished by a few simple entries within the ScriptLogic Manager. 

There are several other settings we will go through to help you tighten up the 
company's control of the network and its resources. 

By completing these lessons, you will have created a more secure and 
efficient networking environment for your users. 
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Lesson 8: Root Mapping Home Directories 

The first task we will cover is to "Root Map" your user's home directories. 
The Root Mapping concept originates from the Novell Netware operating 
system. It essentially allows a drive to be mapped to a directory that looks 
and acts like a root directory instead of a subdirectory. Root Mapping to the 
user's home directory provides a simple path to the directory. Since all other 
user directories on the drive are invisible to the user, there is no confusion as 
to where the directory is. The user does not have to search for their folder 
among the other user's folders, thereby making it faster to find what they are 
looking for. 

If drive H: is declared as the user's home directory in the UMD applet, 
BSmith's directory is referenced as H:\BSmith. However, if the drive is root 
mapped, it is referenced as H:\. The mapped drive, H:\, is automatically 
treated as H\BSmith. 

Using ScriptLogic, root mapped home directories can be utilized regardless 
of the operating system. Since root mapping home directories is so benefi- 
cial to the user and provides more network security, you have decided to 
change the current implementation as discussed in lesson 3. 

Implementing this feature may require a modification to the 
user's home directory designation in UMD as well as sharing 
the user's home directories. 

1. Since home directories are already setup on your network, you have an 
existing base user folder. This is the folder that houses all of the indi- 
vidual user directories. This user folder is located on E:\Users and is 
shared as Users. 

2. Verify that each user's network account has a home directory defined for 

It. Each user's home directory designation should specify a drive of Y: 
and a home directory location of \\Sapphire\Users$\%UserName% in the 
user profile section. 

The drive letter cannot be specified as H: as that is what we want our 
final drive mapping to be after using ScriptLogic. 

3. Now that each user has a home directory, we must assign Full Control 
NTFS permissions for the Network Administrator to access it. The 
directory must also be shared. The Administrator should be given access 
to this directory for the purposes of daily backups and administration 
needs. 





As an alternative to manually sharing user folders and applying 
permissions, AutoShare can be used to watch the user base 
folder for new user accounts. Download a trial copy of 
AutoShare at www.scriptlogic.com. 
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To grant the Administrator access to this folder, load Windows Explorer 
and navigate to the E:\Users folder. Expand the folder to show each user 
folder beneath it. Right-click on each user folder and select Properties. 
Select the Security tab. Press the Permissions button. You will see that 
only the user has Full Control access to this folder. Press the Add... 
button and double-click Domain Admins from the selection list. Set the 
Type of Access to Full Control. Press the OK button twice. Back at the 
Properties dialog box, select the Sharing tab. Select the Shared As 
button to share the folder. The share name is set to the user id. 

For security purposes, it is recommended to make the folder a hidden 
share. This means that the folder does not appear when users are 
browsing the network using Windows Explorer or Network Neighbor- 
hood. A hidden share has a dollar ($) sign appended to the end of the 
share name. For example, an employee named Barbara Smith will have 
a shared folder named BSmith$.. 

Press the OK button to save the user information. At this time, the user 
folder is shared and the User and Administrator both have access to it. 

Complete the above process for each user folder. Once this process is 
complete, you should have a base Users folder with each individual 
user's folder shared as follows: 



4. Now that all user folders have been created, we will use ScriptLogic to 
root map the home directories to drive H:. 

Load the ScriptLogic Manager and press the Client Configuration 
button. Select the Drives tab. Since we already have a drive H: mapping 
in the list from our migration, highlight it and press the Modify button to 
. change it. 

We will change the Shared Folder. The Shared Folder field will consist 

of two ScriptLogic predefined dynamic variables, $HomeServer and 
$HomeDir. Set it to \\$HomeServer\$HomeDir$$. Using these dynamic 
variables allows us to create a single entry in the Drives tab versus a 
separate entry per user. The values of the dynamic variables change 
depending on the user that is logging on to the network. 





B Smith 
GJones 
I Hughs 



KMcGovern 
M Ferguson 
TWilliams 



Chapter 4 - Tutorial 



95 



SHomeServer represents the user's home directory server as defined in 
the user account, in this case, WSapphire. $HomeDir represents the 
folder specified as the user's home directory. 

ir Home Birector^r^ — 



In the Shared Folder field, be sure to add a double dollar ($$) sign at the 
end of the Shared Folder specification. A single dollar ($) sign normally 
indicates that the specified share is a hidden share. KiXtart recognizes a 
single dollar ($) sign as an indication that a dynamic variable is to follow. 
In order for KiXtart to process this correctly, we must use a double dollar 
($$) sign to clearly indicate it as a hidden share. 

Set the Validation Type to Domain and a Value of WAY2G0 for the 
Domain name. The Class, Operating System and Connection sec- 
tions of Validation Logic will remain the same as our default settings. 
This will cause the mapped drive to be configured for ait users in the 
domain of WAY2G0. 





SHomeServer 



SHomeDir 
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The Drive Settings dialog box should be similar to the following: 



I- | H [Fj i omeS er ver\ $H omeDir $$ 



Drive Settings 



Letter Path 



lisri 



O H'de from Windows ExplGrer 
Explorer Label (20QQ and^new,erj 



On Error 
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Type 
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El" 95 
Jg;98 
0 Me- 

1/ ~ 



g 2000 
E;2003 




Description^ 





ji Eancelr^ I 







5. Press the OK button to save the drive configuration. Press the OK 
button again to return to ScriptLogic's main menu. 

Be sure to Save and Replicate these changes when all configurations are 
complete. The changes to the user's home directories will take effect the 
next time they log on to the network. 
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Lesson 9: Set Default Paths For MS Office 

Since drive H: is mapped as the users home directory drive letter, Microsoft 
Office can be configured to store documents on this default drive. This is 
beneficial to the user as the documents in the home directory will be backed 
up daily. They will also be available on any machine the user logs on to. 
Other common files such as clip art and templates should be stored on the 
network in our mapped drive S: in order to allow shared use of common clip 
art and template files. 

> Configure Office Settings for client workstations: 

1. To define these paths using ScriptLogic, press the Client Configuration 
button from the ScriptLogic Manager main dialog box, 

2. Select the MS Office tab. 

3. We will add several configurations to this list. Press the Add button. 

4. Choose Office (auto-detect version) from the Application/Suite drop- 
down list. 

5. Select Word Open/Save Folder from the Option drop-down list. This 
specifies the default folder to use when any version of Word opens and 
saves documents. 

6. Specify the folder to use for the documents in the Folder field. Since we 
have already mapped Drive H: as our user's home directory, we can 
simply enter H:\Documents. This will allow default access to documents 
on each user's home directory. 

7. Validation Logic should be set to our defaults of Group Membership for 
the Type and * (asterisl<) for the Value. The Class, OS and Connection 
Type should be left to the default values. 
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The Microsoft Office dialog box should look like the following: 



Microsoft Office Settings:^ 



Office [auto-detect version) |@ 



flption 



Word Open/Save Folder 



; Folder 



F Validation. l:ogics= 
^ Type ' ' 



; H:\Documenls 



Value' 



Group Membership 



f Class - -.1^ 
@! Desktop 
Q Notebook; 

gtablet'PcV-'^^^'"; 
ITj) Perm Senv^Cfen?- }- 

JDi " D dmairij CQntrallei 



f Connection-^ 



j, Description 



OK 



Canceh 



8. Repeat steps 3 - 7 using the following configurations: 



^Appfichtion/Swie - 



- Opiiot} 



Mcei(a.uto.^delect-> verston ) , Word. CJ i B^Aif, 



\Foider 



_-.S :\Mic ro so ft Qffic e \CJip, Art I.LJ3lopRLM§I^ 

Office (autchdete ct version ) Excel Open/Save H:\Documents J_ Group Merribe'rship','^ 

(Office (aut^detect versior^) Qffice^template/^"T^ S:\MtcrQsoft OfffceMempfatesci Group MernbershipT^^T^ 

If the folders specified above do not exist, they will be automatically 
created. 

Remember that we previously mapped drive S: as a common folder 
available to all users. 

9. Press the OK button again to return to ScriptLogic's naain dialog box. 

Be sure to Save and Replicate these changes when all configurations are 
complete. The MS Office settings will take effect the next time each user 
logs on to the network. 



rVafif^iionJiogic Type 
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Lesson 10: Configure Mail Profile 

In this lesson, we will configure ScriptLogic to create Mail profiles for all 
Domain Users. A Mail profile is used to connect a client to their mailbox on 
the Exchange Server. The profile is stored on the client's workstation. The 
Way2Go Travel Agency's network contains an Exchange Server named 
Ruby. Each user has a mailbox on the Exchange Server. Each mailbox is 
defined with an alias or display name that is defined to match the user's 
network logon id. 

> To enable Mail Profiles: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the iVIait Profile tab. 

3. Press the Add button. 

4. Select Do Not Overwrite from the Overwrite drop-down list. This option 
determines whether or not the Exchange profile will be newly created on 
the workstation. If a user profile exists with the same exact profile name, 
it will be preserved with its existing settings. However, if a default profile 
exists on the workstation using a different profile name, a new Default 
profile will be created. Assuming a new default profile is created, the 
user will have to perform a one-time reconfiguration of their default 
Outlook settings. These settings include the personal address book, 
personal folders, offline address book, offline folders, startup view, spell 
check, and auto-archive. 

5. Enter a name to use for the Mail Profile Name. We will create profiles 
using the user's full name. Type in $FullName or select it from the 
Dynamic Variable selection list by pressing F2. 

6. Enter the server name for the Exchange Server. In our example, we will 

enter WRuby. 

7. Enter the Mailbox Name that corresponds to the user's mailbox on the 
Exchange Server. This should be done using a dynamic variable which is 
resolved by the logon process. The value of this variable is then resolved 
to match a mailbox on the Exchange server. Let's enter $Userld. In our 
case, this will resolve to the user's alias for the mailbox. 
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8. As a default for new profiles, we will enable Personal Address Books. 

They will be stored in the user's home directory so they are accessible 
from whatever workstation they log on to. Enter H:\Exchange for the 
location of the Personal Address Book (PAB) folder. Remember, H: 
was mapped as the user's home directory. This mapped drive will be 
available on any machine the user logs on to. If the Exchange folder 
does not exist In the user's home directory, it will be created. Check the 
Enable Personal Address Book check box. Leave the default for the 
PAB File Name. 

The Outlook dialog box should look similar to the following: 



Mail Profile Settings 



irMail Pfofile- 



j Profile Iempld|e File [exchproFprf 



Overwrite | Do Not Overwrite |N 
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9. Press the OK button to save the new settings. Press the OK button again 
to return to ScriptLogic's main menu. 

Be sure to Save and Replicate these changes when all configurations are 
complete. The Mail Profile settings will take effect the next time each user 
logs on to the network. 
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Lesson 11: Launch Startup Application 

Way2Go's company policy dictates that upon logging on to the network, 
each user must check their email. To enforce this policy, we will configure 
ScriptLogic to automatically launch Outlook once a day for all employees. 

► To enable this feature: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Application Launcher tab. 

3. Enter $Outlookfilespec in the Filespec field. This will launch Microsoft 
Outlook. 

If no path is specified in the Filespec field, Windows will automatically 
search the workstation's current directory, path, and Windows registered 
applications for the specified application. If a path is specified, the path 
is searched for the application. If the application is not found, it is not 
loaded. 

4. Accept the default Launch Options. Since this application should only be 
launched once a day, we will set the Cycle entries to Everyday, Once 
Per Day (User). This means Outlook will be automatically launched 
everyday the first time each employee logs onto the network. 

5. The Validation Logic should be set to our defaults. 
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The Application Launcher Settings dialog box should look like the follow- 
ing: 



Application Launcher Settings: 



X 



Filespec 

jSOutlookfiiespec 



Arguments; 
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6. Press the OK button to save the new settings. Press the OK button again 
to return to ScriptLogic's main dialog box. 

Be sure to Save and Replicate these changes when all configurations are 
complete. The automatic launching of Outlook will occur the next time each 
user logs on to the network. 
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Applications that are launched using the Application Launcher are executed 
under the security privileges of the user unless the Run as Administrator 
checkbox Is set. 

Way2Go Travel wishes to have each client to display a company created 
wallpaper file. Although this can be done easily on the Client Configurations 
Display tab, they want each department to have a different wallpaper file. 
This can be done by using the Application Launcher to copy the appropriate 
wallpaper image to the client using the correct validation logic. 

There will be several entries in the application launcher dialog, each will 
copy the appropriate wallpaper image file to the clients %windir% folder. The 
Display tab will be set to show the wallpaper. 

To copy the wallpaper file to the %windir% folder: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box.. 

2. Select the Application Launcher tab. 

3. Enter cmd,exe in the Fllespec field. 

4. Enter /c copy "$Netlogon\accounting,bmp" "%windir%\wallpaper.bmp" 
In the Arguments field. 

5. Check the Run as Administrator checkbox. This is necessary as access 
to the system32 folder requires elevated privileges. 

6. Accept the default Schedule Options. Since this application should only 
be launched once a day, we will set the Cycle entries to Everyday, Once 
Per Day (User). 

7. Set the Validation Logic Type for Group Membership and the Value to 
Acctg. The accounting.bmp image will be copied for all users in the 
Accounting group. 

8. Manually place accounting.bmp into the NETLOGON folders of the 
Domain Controllers. 

9. Select the Display tab. Set the Wallpaper File entry to wallpaper.bmp. 

Other application launcher settings like this one may be made for other 
departments. 
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Lesson 12: Configure Registry Settings 

To personalize the network logon prompt, you have decided to implement 
the following registry setting that will change the logon prompt to something 
a little more user friendly. This can be accomplished by a registry modifica- 
tion. To avoid having to manually change the registry on every workstation, 
ScriptLogic can perform registry changes during the logon process. 

> To implement this registry setting: 

1 . Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Registry tab and press the Add button. 

3. Select WriteValue from the Action drop-down list. 

4. Select HKEY^LOCAL^MACHINE frorx) the Hive drop-down list, 

5. Enter the following into the Key field: 
Software\Microsoft\Windows NT\CurrentVersion\WinLogon 
If the key does not already exist, it will be created. 

6. Select REG_SZ from the Type drop-down list. 

7. Enter LogonPrompt into the Value field. 

8. Enter the customized logon text into the Data/Expression field. 

Enter your username and password to log onto the Way2Go Travel 
Agency's network. 

9. The Validation Logic should be set to our defaults of Group Member- 
ship for Type and (asterisk) for the Value. The Operating System 
validation should be set to NT, 2000 and XP only as this registry setting 
is only applicable to these operating systems. 
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The Registry Settings dialog box should look like the following: 
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10. Press the OK buttori to save the new settings. Press the OK button again 
to return to ScriptLogic's main dialog box. 

Be sure to Save and Replicate these changes when all configurations are 
complete. The Registry settings will take effect the next time each user logs 
on to the network. 



Q 
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Lesson 13: Configuring Internet Settings 

The Way2Go Travel Agency has a company Intranet for internal documents 
and policies. The use of Microsoft Internet Explorer is required on ail work- 
stations. You have decided to load the company's Intranet as the Internet 
Explorer startup page. 

There are some employees that do not have access to get online. These 
users belong to the Sales department (Sales group). Since the company 
does not have a proxy server to filter out these users, we will configure 
ScriptLogic to handle this. This is referred to as a "poor man's proxy" since 
we can limit access to the internet without actually having a proxy server to 
do so. The members of the Sales group will be redirected to the company's 
intranet if they try to access the internet. 

► To configure these settings: 

1. We must first define two new local groups. Let's call them 

InterneLAccess and NoJnterneLAccess. All groups will belong to the 
Internet Access group except the Sales group. The Sales group will be 
part of the NoJnterneLAccess group. 




^ lnternet_Access 

Ural 
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MIS 


Grtxjp 


CustSrvc 


& 

GnK9 


Execs 



2. Press the Client Configuration button from the ScriptLogic Manager 

main dialog box. 

3. Select the Internet tab. 

4. We will add two configurations to this list. Press the Add button. 
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5. The first configuration we will add is for the Internet Access domain 
group. Enter the address to the company Intranet for the Start Page. In 
this case, it is 192. 168. 100. 14. This is the IP address of the server where 
the intranet files exist. 

6. Set the default Validation Logic to Group Membership, lnternet_Access 
group. Press the OK button. 

The Internet Settings dialog box for the lnternet_Access group should 
look Wke the following: 



Internet Settings 
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7. Back at the Internet settings list, highlight the entry we just added. Press 
the Copy button to configure the No_lnterneLAccess group. 



8. In the Internet Settings dialog box, check the Use a Proxy Server 

check box. 

9. We will set the IP address for the company Intranet as the Proxy Server 
Address, 192.168,100.14. 

When any user in the NoJnternetAccess group tries to access the 
internet through this proxy address, they will be directed to the 
company's intranet page. 

10. Change the Validation Logic to Group Membership for Type and 
NoJnternetAccess for the Value. 

The Internet Settings dialog box for the No_ Internet. Access group 

should look like the following: 
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11. Press the OK button to save this second configuration. 

12. Now select the Security Policies tab. We nnust configure a policy to 
disable the changing of the proxy server configuration. 

13. Press the Add button. 

14. Select Enable from the Enable/Disable drop-down list. This will enable 
the selected policy. 

15. Select Internet Explorer Uom the Category drop-down list. 

16. Select the Internet Explorer: Disable changing proxy settings from the 
Policy drop-down list. 

17. Modify the default Validation Logic to apply this policy for Group 
Membership, No_lnterriet_Access. 

The Security Policy Settings dialog box should look like the following: 
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18. Press the OK button to save the new settings. Press the OK button again 
to return to ScriptLogic's main dialog box. 

Be sure to Save and Replicate these changes when all configurations are 
complete. The settings will take effect the next time each user loqs on to the 
network. 
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Lesson 14: Install a Service Pack 

A new service pack for Windows 2000 (SP4) is available, ScriptLogic can 
easily deploy this update to all Windows 2000 client machines. In our 
example, we will apply this service pack to all W2K clients with the excep- 
tion of one. 

> Let's start by getting the service pack ready for deployment. 

1 . After downloading the service pack from Microsoft's web site, the file 
must be extracted into a folder where all users have a minimum of Read 
Only access. Extract the service pack with the following command at a 
command prompt: 

x:\My Downlodds\l^2KSP4 -X 

You are prompted to select a location for the extracted file(s). The 
UPDATE.EXE file is placed into the specified folder. Choose the 
l:\Windows\W2K\SP4folder. This folder must exist before the file can be 
extracted to the folder. 

Remember, I: was mapped earlier to the \\Diamond\lnstalls share. 

>Now, we can configure the ScriptLogic Service Pack tab to allow the installa- 
tion of the Windows 2000 service pack. 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Service Pack tab. 

3. Press the Add button. 

4. Select the Windows 2000 OS Version from the drop-down list. 

5. Select the language of the service pack to be installed from the Lan- 
guage drop-down list.. 

6. Select Service Pacl< 4 from the Update to drop-down list. 

7. Select Logoff from the Time drop-down list. 

8. Finally, enter the location where the L/PDiATE.EXEfile can be found. 
Optionally, press the Select File button to locate the file. For the 
Way2Go Travel Agency, enter l:\Windows\W2t<\SP4\UPDATE,EXE. 
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The Service Pack Settings dialog box should look like the following: 



Service Pack Settings 
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9. The Validation Type should be set to Group Membership and Value to 
(asterisk). The Class Operating System and Connection Type are 

automatically set. 

10. Press the OK button to save the entry. 

Be sure to Save and Replicate these changes when all configurations are 
complete. The service pack will be deployed when the user logs off the 
system. 

The Way2Go Travel Agency has an employee that is the company's web 
developer. He is responsible for maintaining the company's web site. His 
work is done on his own personal computer and he does not want any 
software automatically installed to his computer. He prefers to install all 
software on his computer by himself. In order to take advantage of 
ScriptLogic's service pack deployment feature for ail other employees, we 
can omit this user from receiving any service packs that might be installed, 
now, and in the future, without creating a special local group to accommo- 
date him. 
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► Let's disable the deployment of all service packs for the web developer. 

1. Have the employee create a special file in the root directory of the 
computer's system drive. The file should be called SLNOCSD, The file 
should not have any extension. The contents of this file can be anything 
or nothing at all as long as the file exists. 

2. As long as this file exists on the employee's system drive, no service 
packs will be deployed on his machine regardless of the validation logic 
applied to the entry on the Service Pack tab. 
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Lesson 15: Legal Notice 

ScriptLogic provides a feature that enables a system-wide notice deployed to 
each user prior to the start of the logon process. This notice can provide 
infomiation reminding all employees of your company policies regarding use 
of company equipment, Email. Internet access, etc. or any other message 
you would like to provide. You have been requested to implement this type 
of notice to all users of the network. The notice is displayed before the user 
authenticates to the domain. 

► To enable this feature: 

1 . Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

Select the Legal Notice tab. 

Provide a Window Title for the Legal Notice Window. Let's type Leaal 
Notice into this field. 

Enter an appropriate message into the Message field area. You have put 
together the following message: 

Use of this computer and the company network is restricted to company 
use only as detailed in the company handbook. Use of company equip- 
ment is monitored. Using this computer for personal use is strictly 
prohibited. 

The Legal Notice dialog box should look similar to the following: 



2. 
3. 



j . illegal Notice 



WindowJ.aig 



^ Legal Nolicel 



I Message k^^^S ^"j^- /f 



h^^^i^ computer and the company network is restricted to company use on^;. as detailed in the company 
handbook. Use of company equipment is monitored Using this computer to personal use is strict^^ prSSSted 'h 



5. Press the OK button to save the Legal Notice. 

The legal notice will not become effective until theses changes are saved 
and replicated. 
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Lesson 16: Display a Custom Company Logo 

An option exists in the Global Options dialog box to display a custom 
company logo instead of the default ScriptLogic logo as ScriptLogic ex- 
ecutes during logon. You are requested to implement this using your 
company's logo. 

► To display the logo: 

1 . After loading the ScriptLogic Manager, press the Global Options button. 
Select the Visual tab. Check the option to Display custom graphic. 

2. Press the Import button. Locate the custom graphic file. Valid file types 
are bmp, rie, gif and jpg. Highlight the file and press the OK button. 
Importing the logo file copies the specified file into the slogic$ share. 

3. Test the logo by pressing the View button. This will open the graphic 
image in a new window. Press the Escape button to close the View 
window. 

4. Press the OK button to save the global visual option. 

These changes will not take effect until they are saved and replicated. 
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Lesson 17: Incorporating A New Domain Controller 

At this point, tlie Way2Go Travel Agency has decided to add an additional 
domain controller to accommodate their growing number of employees. The 
new domain controller will be called Pearl. 

►Configuring ScriptLogic to handle another domain controller is a simple 
process that the following steps will demonstrate: 

1 . Once the new domain controller is fully functional and attached to the 
network, we must configure ScriptLogic to see it. Open ScriptLogic on 
the Operations Master and press the Server Manager button. 

2. In the Server Manager dialog box, press the Add button to add the new 
server to the list. Locate and select the new domain controller. When a 
server is added to the list it is automatically configured as a target for 
replication if the target path exists. The ScriptLogic service must be 
installed, started and set to grant service requests. 

To install the ScriptLogic Service, right-click on the service ceil in the 
grid for the new server. Select Install Service from the popup menu. 
When prompted, enter the two unique sets of requested user credentials. 

3. Replicate the ScriptLogic files to the new domain controller by pressing 
the Replicate Changes button. 

The new domain controller is now ready to go. Any user authenticated by this 
server will receive the appropriate network settings. 
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Summary 




Congratulations! You have completed the second tutorial. 

This tutorial has demonstrated several ScriptLogic concepts that are needed 
when configuring your setup. It has shown how to migrate your existing 
network environment from batch file logon scripts into ScriptLogic. Although 
this tutorial has not detailed all possible situations (an impossible task), it has 
taken the common ground and has helped you to take the first step. Refer to 
the ScriptLogic Administrator's Guide for more detailed information on each 
configuration option available in the ScriptLogic IVIanager. 

The next tutorial will demonstrate the use of ScriptLogic in a larger company 
with a Single-Master Domain model covering 4 locations. ScriptLogic will be 
used in a single location to configure the working environment of users at 
that location. 
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Case Study 3 - The ACME Corporation 



The Company 

The ACME Corporation is a national telemarketing company with four 
locations extending across the United States. They are headquartered in 
Dallas, TX. The company's headquarters is made up of approximately 400 
employees. The other locations, located in Miami, New York, and Los 
Angeles have approximately 200, 500, and 300 clients respectively Each 
location is connected through a Fractional T-1 Frame Relay. 

The underlying network infrastructure follows a Single Master Domain 
model, using NT 4.0 servers. The company's headquarters represent the 
master domain, ACME-HQ. The master domain consists of a PDC and BDC 
at this location and an additional BDC at each of the other locations. The 
master domain's BDCs at each of the other locations are primarily used to 
authenticate users onto the master domain. There is a one-way non-transi- 
tive trust from each local domain to the master domain. 

Each resource domain (ACME-NYC, ACME-MIA and ACME-LA) consists of 
its own local domain including a PDC and BDC as well as the master BDC. 
Other resources in these domains include network printers as well as Ex- 
change servers. Clients at all locations are comprised of 98 and NT operat- 
ing systems. 

As is normally the case in the Single Master Domain model, user accounts 
are maintained by the master domain. The system administrator in charge of 
this domain at ACME headquarters is Charlie. Charlie is in charge of main- 
taining all user accounts, among other things. Each of the resource domains 
have their own network administrator who is in charge of allocating ail 
resources in their own local domains. 

ScriptLogic has recently been purchased by the New York location. Shelly is 
the network administrator at this location. The domain at this location is 
ACME-NYC. There is a problem implementing ScriptLogic in this domain 
model because the centralized user database is on a different domain than 
where ScriptLogic is installed on. Local administrators do not have access to 
modify the main user database. Shelly will have to get Charlie to modify her 
user's accounts. 

As we progress through this case study, we will discuss how this domain 
model works with ScriptLogic. We will demonstrate how to correctly set up 
the user logon scripts and define groups in the local domain so local re- 
. sources may be properly administered. The discussions will focus on the 
ACME-NYC and ACME-HQ domains, but the same ideas would be used on 
the other resource domains had they purchased ScriptLogic. 
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The following diagram illustrates the ACME Corporation's network, Single 
Master Domain model. 

NT 4.0 Domain for the ACME Corporation 
(ACME-HQ) 



10 Network 
Pmters 




ACME-HQ 

Master Domain 
Corporate Headquarters 
Dallas 



6 Network 
Prirttere 

ACME-MIA 
Resource Domain 




Resource 
Accounts Prtirters 

ACME-LA 
Resource Domain 




lONebMsrK 



ACME-NYC 
Resource Domain 
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Group Definitions and User Accounts 

In a Single Master Domain model, groups and user accounts are created and 
maintained on the master domain. Only the system administrator of the 
master domain (Charlie) has the appropriate permissions to update this 
database. 

Shelly, the network administrator of the NYC Resource domain, is in charge 
of all groups and resources on her local domain. 

A portion of the groups found on the ACME-HQ master domain and ACME- 
NYC resource domain is defined below: 

Master Domain Resource Domain 

ACME-HQ ACME-NYC 



M-Acctg 




^ R-Acctg 

Lceal 

Group 


0 M-Acctg-NYC 

Gloiuil 

^ M«Acctg-MIA 
0 M-Acctg-LA 

0 M-Execs ^ 

GtCHfl 


— • 0 M-Acctg-NYC 

GtobaJ 
Group 

^ M-Execs 

Global 




Network Administrator 
Shelly 



System Administrator: 
Charlie 



This type of grouping strategy makes it easy to assign the correct users to a 
resource. No superfluous user definitions or groups are needed. The groups 
on the resource domain are not required for ScriptLogic but are needed in 
order to assign permissions to shared folders. 
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Lesson Overview 

After installing ScriptLogic, the Manager's preferences and defaults should 
be defined. Setting the default Manager preferences provides for a more 
efficient session with ScriptLogic. The settings in Server Manager must be 
verified to ensure the required services are running and that data replication 
will copy the data to all necessary servers. 

The first set of lessons will examine the ScriptLogic environment and 
demonstrate how to effectively set up the working environment by: 

• defining default ScriptLogic preferences, 

• setting profile options including logging, alerts and default validation 
logic, and 

• configuring Server Manager. 

The next set of lessons will demonstrate how to configure ScriptLogic to: 

• define shared folders, home directories, and drive mappings, 

• create mail profiles, 

• customize MS Office settings, 

• configure time synchronization, 

• use message boxes, 

• use Common folder redirection, 

• enable custom scripting, 

• assign logon scripts and 

• replicate and test configuration settings. 
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Initializing the ScriptLogic Environment 

Following the installation of ScriptLogic (detailed infonnation regarding the 
installation of ScriptLogic can be found in Chapter 2, Installing ScriptLogic), 
the Global Options, Profile Options, Profile Manager and Preferences should 
be reviewed. 

Global Options define customized settings that are used for all users execut- 
ing the SLOG 10 logon script. The manager Preferences provide for default 
descriptions, file paths and settings for miscellaneous prompts. 

Profile Options and the Profile Manager allow the configuration of the default 

profile as well as the ability to add new profiles. Since ScriptLogic is installed 
at a single location of the ACME Corporation and will have an average 
number of configuration entries, a single profile will be used in the 
ScriptLogic Manager to handle the company's needs. ScriptLogic comes with 
a default profile which may be used right away or configured to meet certain 
specifications. Additional profiles may be added when necessary. 

The Server Manager should also be configured. It is essential to have the 
managers configured properly before getting started. If they are not config- 
ured correctly, the users may not receive the most current ScriptLogic 
settings when they log on to the network. 
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Lesson 1: Setting Default Preferences 

The Manager Preferences dialog box (File Preferences) defines default 
values for several common prompts used throughout the manager as well as 
a default configuration description, file paths and Manager startup options. 
Modify these preferences as needed. 

The Default Description is stored to each new client configuration entry in 
the Manager. ACME-NYC will use this description to save the userid of the 
user adding the configuration entry. 

>To configure the Default Description: 

1 . Select the Edit tab and provide the following default description in the 
Default Description field. 

Created by $Userid 

2. Press the OK button to save the ScriptLogic preferences. 

The ScriptLogic install creates an initial profile which will house all client 
configuration settings. Multiple profiles may be used to break up and valida- 
tion different client configuration settings. 

Setting the profiles validation logic is the next step. These validation logic 
settings provide a base that all client configurations will use. If a specific 
option is turned off in the profile's validation logic, it will not be available for 
use in any client configuration setting for the profile. 

>To configure the Profile's Validafion logic: 

1 . Press the Profile Manager button from the Manager's main dialog box. 

2. Select the specific profile to be modified. For the purposes of this tutorial 
there will only be a single profile called SLP0001. Highlight this profile 
and press the Modify button. 

3. Since Way2Go does not have any Terminal Server Clients in use, the 
first logical step is to uncheck these options in the default dialog box. 

Uncheck the Term Serv Client Class check box. Member Sen/er and 
Domain Controller should be unchecked by default. 

Check all of the Operating System boxes. 

Leave both Connection types checked. 

4. Press the OK button to save the profiles options. 

All new client configuration entries will adhere to these validation logic 
rules. All unmarked settings will be disabled, preventing the use of them 
in the validation logic. 
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Lesson 2: Setting Profile Options 

The ACME Corporation will make use of ScriptLogic's default profile for all of 
its client configurations. The default profile gets created upon installing 
ScriptLogic, Press the Profile Options button from the Manager's main 
dialog box to modify the selected profile's settings. 

In order to use the default profile, we must customize it by making a few 
simple changes to the profile options. Profile Options include settings for 
Logging, Alerts and Default Validation. 

Logging, the first tab in the Profile Options dialog, is an important feature of 

ScriptLogic. Logging tracks network log on usage by updating a log file(s) 
with important information about each user as they log onto the network. 
This information Is stored in an Comma Separated Value (.CSV) file which 
can be viewed at any time. The information saved into the log file can be 
customized by manipulating the entries in the list on the Logging tab. 

Press the Add or Insert button to add a new entry to the list or highlight an 
existing entry and press the Modify button to change it. The default installa- 
tion creates seventeen log entries in the logging list. 

Provide the Log File Location. This is where the log files will be written to. 
In this case, we will specify the \\Reagan\LOGS$$ share. 

The Logging tab should look similar to the following: 




i . Description" 



' 1 $Oate 

. 2 $Time 

3 SLogonSeiver 

. 4 tWkS(4 

' 5 WedsoseOS 

, 6 SOSCSDVeraion 

. 7 SCormType 

8 flPaddr 

. 9 $SCompulefType 

'10 SUsetiO 

■ 11 (SFuEName) 

12 $Oe$ctiptron 

13 tPm / $loc3lPrrv 




Cutent date 
Cuiterttime 

Authenticating Domain Controller 
Computer Ndme 

Veitiose Opaaiing System version 
Cunent service p4ck 
Connection method 
TCP/IP address 
CoTf^er Type (long) 
U$e{ 10 

(User's name) 
User account Descriptton 
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A popular profile option is the customizable Alerts. Occurrences of certain 

events can be customized to popup a message box and/or update an event 

log. This alert can be directed to a user, administrator or both. 

Shelly, the ACME-NYC administrator has decided to set an alert for the Low 

disk space warning for the workstations In her local domain. The alert will be 

set to immediately notify the user as well as update the administrator's event 

log. 

Part of Shelly's morning routine among other things is to check the prior 
night's backup for any en-ors as well as the event log. The event log will 
have an entry for any user being notified about low disk space. If a user is 
constantly notified about this, Shelly will know that the user needs help in 
recovering free disk space. 

►To configure this alert: 

1 . Select the Alerts tab from the Profile Options dialog box. 

2. Select Low disk space warning from the Event drop-down list. 

3. Select Warning (!) from the Type drop-down list. 

4. We will set two destinations for this event. Check the Display a pop-up 
message to the user logging on box. Leave the default timeout value 
set to 60 seconds. Check the Write this alert to the event log on one 
or more specific computers box. Set the field to WReagan. The event 
log on this server will be updated when this Alert occurs on any worksta- 
tion. The Display Title and Display Text may be customized. All 
ScriptLogic dynamic variables and KiXtart macros may be used in the 
title and text fields. 

The Alerts tab should look similar to the following: 




Chapter 4 - Tutorial 



127 



Another common default setting is the Validation Logic defaults. This can be 
found on the Default Validation tab of the profile options. Setting up valida- 
tion defaults here will make your job of configuring ScriptLogic easier. Once 
the logic is defined, it will not have to be defined again for each new configu- 
ration entry, unless further rules are required. 

The ACME Corporation's workstations are comprised of a mixture of 98 and 
NT operating systems. The default validation logic will not be limited to 
certain operating systems or connection types. We will however remove 
Terminal Server Clients, Member Servers and Domain Controllers from our 
defaults. 

►To set the default validation logic: 

1. Select the Default Validation tab from the Profile Options dialog box. 

2. The Type of validation logic is used to determine how the logic is applied 
to each user. Select Group Membership from the first drop-down list. 
Type an * (asterisk) into the Value field. This setting will force the logic to 
validate based on the user's group membership. The asterisk (*) means 
all groups. 

3. Check the Desktop and Portable Classes and uncheck the Term Serv 
Client, Member Server and Domain Controller Classes. Even though this 
company's network does not consist of all of the specified operating 
systems, we will check all of the operating system boxes. This will allow 
any workstation's operating system to be upgraded at any time without a 
network administrator having to modify all ScriptLogic entries. All Con- 
nection Types should be checked. 

Whenever a new entry is defined in any of the Client Configuration 
dialog boxes, these validation logic rules will automatically be used as 
the default. They may be overridden in any of the configurations dialog 
boxes. 
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The Default Validation tab should look similar to the following: 



= Validation Logrc=== 
j Group Membership 



Value 



rr Class ^ 

Desktop 
0,1 Notebook 
g Tablet PC 
D Term Serv Client 
fji Member; Server 
Q Domain Controller 



■ OS ^ 

p; 95 0 NT 
M 98 g 2000 

S 2003 



- Connection = 
0LAN. 
EJ Dial-Up 



Unlike most of the configurations in ScriptLogic, the Profile 
Options will take effect on all new client configuration entries. 
Any entries entered prior to setting the default validation logic 
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Lesson 3: Server Manager Setup 

Server Manager is used to configure Replication and manage the Script- 
Logic service. 

Replication is the act of duplicating information from one defined location to 
another. ScriptLogic uses replication to copy the ScriptLogic configurations 
to ail domain controllers. These domain controllers must be defined in the 
Server Manager. By default, these are defined during the install of Script- 
Logic. However, if this list is incon-ect or a domain controller has been added 
to or removed from the network, it must be updated. 

ScriptLogic utilizes a service, called the ScriptLogic service, to provide the 
ability to perform tasks that require administrative rights without 
sacrificing user-level security at the workstation. 

Server Manager monitors the status of this service on all domain controllers. 
The existence of this service should be confirmed to be in the Server 
Manager 

To confirm the list of server, press the Server Manager button from the 
ScriptLogic Manager main dialog box. If necessary, press the Add or Re- 
move button to modify the list. Pressing the Discover button will query the 
domain for all domain controllers. The domain controllers are displayed, 
showing the status of each service. 

The ACME-NYC domain has the following Service Manager setup: 



lAsjScriptLogic Server Manager - VM322O0MAIN 



jj File: View > Server 'Service Replication irlHeip : 



I SSaveliist | (gRefresK^/-' j; - Adi'' v 


Remove 
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Rep(rSjii|-S^^About 




. Server 


Target j: RepGcatlon Status . 


/Service Requests 


'ScripttogiGiServtcet 




d 


gi REAGAN 


El \Q 10/02/2002 02:37 

1 


Q Granted 


O started 








} 








^For Helpj.press Fl- ; 
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Configuring ScriptLogic 

Now that you have configured ScriptLogic's preferences and environment 
settings, it's time to implement several client configurations in ScriptLogic. 
This includes drive mappings for common and shared folders as well as 
home directories, Mail Profiles, MS Office settings, desktop shortcuts, time 
synchronization, message boxes, folder redirections, and custom scripts. 

The rest of this tutorial will demonstrate several of these client configura- 
tions. It will also show you how to update ScriptLogic with a new domain 
controller. 
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Lesson 4: Drive Mapping 

Drive Mappings provide easy access to commonly used folders. Mapped 
drives commonly point to folders on the network. When mapping a drive, a 
local drive letter is assigned to a specific folder on the network. 

Shelly will implement a common shared folder that all users will have access 
to. This folder will be named Common and has a share name of Common. 
Drive S will be mapped to this folder. This folder exists on the Carter domain 
controller. The UNC for this folder is \\Carter\Common. 

►To implement the drive mapping: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Drives tab. 

3. Press the Add button. 

4. Choose drive letter S from the Letter drop-down list, 

5. Specify the share that the drive will be mapped to in the Shared Folder 
field. In this case, it is \\Carter\Common, 

6. Notice the validation logic settings. These should match our default 
settings created in lesson 2. Accept these default settings. 



132 



ScriptLogic Getting Started 



The Drive Settings dialog box will looi^ like the following: 



Drive Settings 



Letter Path 



} S ||^}[ WCarlefVCommon 



O Hide from Windows Explorer 
Explorer Label (2QQQ and newer). 



On Error 



Continue 



I Invalidation Logic- 
Type' - ; 



Value; 



Group Membership 



mm. 



- Class - 

B Desktop . . 
S Notebook ^ 
MiT.ablet^PC ^ 
fj! fermSsrwCirent:- 
Uj Men-tber: Server 



•OS -,. : 

1^:^98 g 2000 
/ ^ " © 2003 



-^Connection- 
l^lDial-upr 




7. Press the OK button to save the new settings. 

Shelly would also like to implement a shared group folder for the Accounting 
department. Only employees within that department (plus Administrators) will 
have access to this folder. This folder will exist on the Carter domain control- 
ler and will be named Accounting. This folder will have a share name of 
Accounting, Drive T will be mapped to this folder. The UNC for this folder is 
WCarteMccounting. . 

To limit access to this folder, the folder must be shared and appropriate 
permissions must be assigned to it. Shelly assigns the R-Acctg and Domain 
Admins groups (of the resource domain) Full Control permissions to this 
share. 
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►To implement the mapping of this share: 

1. Press the Client Configuration button from the ScriptLogic Manager 

main dialog box. 

2. Select the Drives tab. 

3. Press the Add button. 

4. Choose drive letter 7 from the Letter drop-down list. 

5. Specify the share that the drive will be mapped to in the Shared Folder 
field. In this case, It is WCarteMccounting. 

6. Although we will still use the validation logic Type of Group Membership, 
we will limit the group to the Accounting department only. Specify 
\\Bush\M-Acctg-NYC as this group in the Value field. This will assign the 
drive mapping to all users who are part of the M-Acctg group. A group 
from the master domain is used in the ScriptLogic setting because the 
master domain is where users are authenticated. 

The Drive Settings dialog box will look like the following: 




) , Letter Path 
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7. Press the OK button to save the new settings. 

Now it's time to configure user honne directories. Shelly would like to con- 
tinue to use her user's current home directories but would like for ScriptLogic 
to handle the administration of them. She wants the home directories to be 
root mapped. Once ScriptLogic is configured to map to these drives, the 
users can log on from any workstation and still have their drive mappings to 
their own home directory. This is especially important for this company 
because the telemarketing agents work in shifts and share workstations. This 
will automatically map the current user of the workstation to their own home 
directory. 

The Root Mapping concept originates from the Novell Netware operating 
system. It essentially allows a drive to be mapped to a directory that looks 
and acts like a root directory instead of a subdirectory. Root Mapping to the 
user's home directory provides a simple path to the directory. Since all other 
user directories on the drive are invisible to the user, there is no confusion as 
to where the directory is. The user does not have to search for their folder 
among the other user's folders, thereby making it faster to find what they are 
looking for. 

For example, if drive Y: is declared as the user's home directory in the UMD 
applet, FFIintstone's directory is referenced as y:\Users\FFIintstone. How- 
ever, if the drive is root mapped, it is referenced as Y:\. The mapped drive, 
Y:\, Is automatically treated as Y:\Users\FFIintstone. 

User Manager for Domains (UMD) allows each user's profile to be set up 
with home directory locations. Ail employees of ACME have home directo- 
ries set up in the user database. The drive is set to /and the location is set 
to \\ResourceDomamServer\Users\%UserName%, The Home Directory 
field on the master domain points to the resource domain's user folders. For 
employees working in the ACME-NYC domain, this is set to 
\\Carter\Users\% UserName %. 

After the User's folder is created, it must be shared and permissions must be 
assigned to it. This must be done by the resource domain's administrator 
since the directory exists on the resource domain. By default, the user is 
automatically assigned access to the folder. The Administrator must also be 
given full access to it. The Administrator should be given access to this 
directory for the purposes of daily backups and administration needs. 

An alternative to manually sharing user folders and applying 
permissions for new employee accounts is through AutoShare. 
In the case of a Single iVIaster Domain model, AutoShare cannot 
be used because the SAM database is stored on a different 
domain than the home directory folders. 
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To grant the Administrator access to this folder, load Windows Explorer and 
navigate to the Y:\Users folder. Expand the folder to show each user folder 
beneath it. Right-click on each user folder and select Properties. Select the 
Security tab. Press the Permissions button. You will see that only the user 
has Full Control access to this folder. Press the Add... button and double- 
click Domain Admins from the selection list. Set the Type of Access to Full 
Control. Press the OK button twice. Back at the Properties dialog box, 
select the Sharing tab. Select the Shared As button to share the folder. The 
share name is set to the user id. 

For security purposes, it is recommended to make the folder a hidden share. 
This means that the folder does not appear when users are browsing the 
network using Windows Explorer or Network Neighborhood. A hidden share 
has a dollar ($) sign appended to the end of the share name. For example, 
an employee named John Doe will have a shared folder named JDOE$. 

Press the OK button to save the user information. At this time, the user 
folder is shared and the User and Administrator both have access to it. 

Complete the above process for each user folder. Once this process is 
complete, you should have a base User's folder with each individual user's 
folder shared as follows: 



$•1^ [E:) 



B 



^ Users 
IHSI B Smith 
\—iml G J ones 
i'-Sl I Hughs 
I'HSl KMcGovern 
IHm! M Ferguson 
TWilliams 



Now that all user folders have been created, we will use ScriptLogic to root 
map the home directories to drive H:. 

►To implement the root mapping: 

1. Load the ScriptLogic Manager and press the Client Configuration 
button. Select the Drives tab. Press the Add button. 

2. Choose drive letter /-/from the Letter drop-down list. 

3. The Shared Folder field will consist of two ScriptLogic predefined 
dynamic variables, $HomeServer and $HomeDir. Set it to 
\\$HomeServer\$HomeDir$$. Using these dynamic variables allow us to 
create a single entry in the Drives tab versus a separate entry per user. 
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The values of the dynamic variables change depending on the user that 
is logging on to the network. 

$HomeServer represents the user's home directory server as defined in 
the user account, in this case, WCarter. $HomeDir represents the folder 
specified as the user's home directory (\users\FFIintstone). Be sure to 
add a double dollar ($$) sign at the end of the Shared Folder specifica- 
tion. Since the KiXtart engine interprets strings during execution and 
dynamic variables begin with a dollar ($) sign, we must specify two so 
that KiXtart knows that a dynamic variable does not follow. The single 
dollar sign is used to indicate the mapped drive is a hidden share. 

Accept the default validation logic settings. This will cause the mapped 
drive to be defined for users in all groups defined in the ACME-NYC 
domain. 

The Drive Settings dialog box should be similar to the following: 



Drive Settings 
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5. Press the OK button to save the drive configuration. 
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Lesson 5: Mail Profiles 

In this lesson, we will configure ScriptLogic to create Mail profiles for ail 
Domain Users in the ACME-NYC domain. Mail profiles are used to connect a 
client to a mailbox on the Exchange Server. The profile is stored on the 
client's workstation. Each domain in the ACME Corporation has its own 
Exchange Server named Mail. Each user has a mailbox on the Exchange 
Server attached to their local domain. Each mailbox is defined with an alias 
that is defined to match each user's network logon id. 

►To implement Mail Profiles: 

1 . Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Mail Profile tab. 

3. Press the Add button. 

4. Select Do Not Overwrite from the Overwrite drop-down list. This option 
determines whether or not the Exchange profile will be created on the 
workstation. If a Mail profile exists with the same exact profile name, it 
will be preserved with its existing settings. However, if a default profile 
exists on the workstation using a different profile name, a new Default 
profile will be created. 

5. Enter a name to use for the Mail Profile Name. We will create profiles 
using the user's full name. Type in $FullName or select it from the 
Dynamic Variable selection list by pressing F2. 

6. Enter the server name for the Exchange Server. In our example, we will 
enter WMail-NYC, 

7. Enter the Mailbox Name that corresponds to the user's mailbox on the 
Exchange Server. This should be done using a dynamic variable which is 
resolved by the logon process. The value of this variable is then resolved 
to match a mailbox on the Exchange server. Let's enter $Userld. In our 
case, this will resolve to the user's alias for the mailbox. 

8. As a default for new profiles, we will enable Personal Address Books. 
They will be stored in the user's home directory so they are accessible 
from whatever workstation they log on to. Enter H:\Exchange for the 
location of the Personal Address Book (PAB) folder. Remember, H: 
was mapped as each user's home directory. This mapped drive will be 
available on any machine the user logs on to. If the Exchange folder 
does not exist in the user's home directory, it will be created. Check the 
Enable Personal Address Book check box. Leave the default for the 
PAB File Name. 
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The Mail Profile Settings dialog box should lool< similar to the following: 



Mail Profile Settings 



MailPfofiie^ 



Overvwite |DoNo1 Overwile P]! 



Profile T empfale File {exchprof.prf 



Ma8 Profile-Name |$FullName 



Exchange Server? \\MaiWYC 



Maabox Name |$U$erlD 



-Validation Logic=? 
Type ' 



Valuer 



I ^"J^P ^ embersNp 



Class- 



F» Desktop 
R} Notebook 
g Tablet PC 

O Teftr-'Serv Cfenl 
131 Mernbet-Sefver. 
Q DemajhiCcntfc^Ier. 



OS 

g 98 g 2000 
M Me F! XP 
! E! 2003 



■Conneclion- 
StAN 
Ei Dial-up 



• PAB i Personal Pokier SeUings^-— ^ 
Fi] Enable Personal Address-Book 



PAB File Name |$UseflD.PAB ' 

O Enable Pers onal Folders 

PST File Name |lU trlD F^T 



Foldei HAExchange 



'0.ffl<n"e Access.Settingss~= 

n Enable Offline Address Book 
nr Enable Offline Folders 



[ OST File Name |lU,cr|D,CST_ 
Folder [ ] 



pescriptibri. 
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Lesson 6: MS Office Settings 

Since drive H: is mapped as the user's home directory, we can use the 
H:\Documents folder to store Microsoft Office documents. This is beneficial 
to the user for two reasons. First, the documents in the home directory are 
backed up daily. Second, the user's documents are available on whichever 
machine the user logs on to. Other common files such as clip art and 
templates should be stored on the network in our mapped drive S: in order to 
enable shared use of common clip art and template files. 

►To implement MS Office Settings: 

1. To define these paths using ScriptLogic, press the Client Configuration 
button from the ScriptLogic Manager main dialog box. 

2. Select the MS Office tab. 

3. We will add several configurations to this list. Press the Add button. 

4. Choose Office (auto-detect version) from the Application/Suite drop- 
down list. 

5. Select Word Open/Save Folder from the Option drop-down list. This 
specifies the default folder to use when Word opens and saves docu- 
ments. 

6. Specify the folder to use for the documents in the Folder field. Since we 
have mapped Drive H: as our user's home directory, we can simply enter 
H:\Documents. This will store and retrieve documents from each user's 
own home directory. 

7. The Validation Type should be set to our default of Group Membership 
and a Value of * (asterisk). 
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The Microsoft Office Settings dialog box should look like the following: 



Microsoft Office Settings 



Application/Suite' 



Office (auto-detect version) 1^ | 



Gption^ 



m 



Word Open/Save Folder 



Folder 



H:\Documents 



•-Validation Logic 
Tiipe 



^alue 



Group Membership 



BE 







-Connection^ 


B Desktop ' " 

j^j Notebook'^; ci.' 
gi Tablet PC ' ' ' 


. g UN. 

! fe! DialV 








lO IDornaiiii Controller: 







, Description 



OK. 



' • -.Cancel „ 



8. Repeat steps 3 - 7 using the following configurations: 







Vah'daU'o}} Logic Type \ \ 


iOffice fauto^detectlYersionV Word Clip Art ' 


^ ^ S:\Microsoft ,Office\Clip Art"- 


GroupiMembe rsHipl. * ^''f 1 


Office (auto-detect version) Excel Open/Save 


H:\Documents 


Groujj Membership. * 


Lpfficef(aut6-detfct^rsion) Office templates 


S:\Micro'soft bffice\Tempiates 


Gr6Uptlv!emb¥rl'fiip: Vr'^S 



If the folders above do not exist, they will be automatically created. 

Remember that we previously mapped drive S: as a common folder 
available to all users. 

9, Press the OK button to save the new settings. 
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Lesson 7: Time Synch 

Time Synchronization allows the clock on the user workstations to be syn- 
chronized with a network time source. 

►To configure a time source: 

1. Press the Client Configuration button from the ScriptLogic Manager 

main dialog box. 

2. Select the General tab. 

3. Press the Add button. 

4. Specify the server that the workstation will use to synch its clock with. In 
our case, we will specify \\$LogonServer for the authenticating domain 
controller. 

5. Now for the Validation Logic. We will use our validation logic default 
Type of Group Membership and Value of * (asterisk). 

The Time Server Data dialog box should now look similar to the follow- 
ing: 




6. 



Press the OK button to save the new settings. 
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Lesson 8: Message Box 

The Message Box is a useful tool to display warnings or informational text to 
users after their log on has been authenticated. This differs from the Legal 
Notice as described in Case Study 2. 

We will define a message box for all users to remind all employees in the 
ACME-NYC domain of the upcoming company meeting. 

>To implement Message Boxes: 

1. To enable this feature, press the Client Configuration button from the 

ScriptLogic Manager main dialog box. 

2. Select the Message Boxes tab. 

3. Press the Add button. 

4. Enter the text for the Window Title, This will be placed in the title bar of 
the message box dialog. We will enter a simple caption, Reminder. 

5. Enter the text for the actual message to appear to the user in the Mes- 
sage field. 

Don't forget our monthly company meeting on the last Wednesday of 
every month!!! 

6. Select a Style from the drop-down list. We will select Information (i) for 
our reminder message. Each style defines a different icon for the win- 
dow. 

7. Provide a Timeout Value of seven (7) seconds for the message dialog 
box. The dialog box will automatically disappear after seven (7) seconds. 
Set this to zero for no timeout value. The user will have to press the OK 
button to remove the message from their display. 
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8. Now, we must decide how often and when to have this message display. 
There are several options to choose from. For our company, we will 
display the message every Wednesday, each time they log onto the 
network. 

Select Day of Week, Wednesday for the cycle of the message box. 
Select a Frequency of Every Logon. 

Once the top half of the dialog box is filled out, press the Test Message 
Box button to see how the message will look. 



Reminder 



Window Title 



; Don't forget our monthly company meetinig on the4ast:Wednesday of eyeryrm^ * 



Style 



Messjige- 



9. Keep the default Validation Logic settings. 
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The Message Box Settings dialog box should now look similar to the 
following: 



1 Reminder 



Message Bok Settings 



Window Title 



viessage " 



Don't forget our monthly company meeting on the last 
Wednesday of every month!!! 



m 



Style 



1 Information (i) iRJ 




Tr! 




Day ofWeeIc 






Frequency:^ . 




— rp^l 



Timeout in Seconds::(Ovr'nQjtimeQut]C 



D ay ^of Week. 



Wednesday 



Every Logon 



Test MessagejBox*> 



i UUID 



HKE8H4D 



FValidalion Logic— 



[Group Ivlembership 



Jpl Desktop/ 
^0 Notebook. 
Ig Tablet PC 

Of TfefTi}; S.er^^ Q.iBnb \ 
13' y ember? Server' % 
B% ©matm^oittfrdler/ 



^ Fi 95 ^E^' NT ' 



-Connection- 
gl Diaijjplf 



P [ ' iD escrigtion> l- ^ g I > j,,. , :£^PR®^'- > j 



10. Press the OK button to save the new settings. 
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Lesson 9: Common Folder Redirection 



In order to have every employee retain a common base desktop, we can 
have the "All Users" Desktop" stored on a network share. This is simply done 
by an entry on the Common Folder Redirection tab. Any shortcut that should 
be shown on alt users desktops should be created in this Common Desktop 
folder. Users can still modify their desktop and add their own shortcuts to it. 

►To enable this feature: 

1. Press the Client Configuration button from the ScriptLogic Manager 
main dialog box. 

2. Select the Common Folder Redirection tab. 

3. Press the Add button. 

4. Select Common Desktop from the Shell Folder drop-down list. 

5. Set the Path to S:\Common Desktop, 

Remember that drive S was mapped to \\Carter\Common in lesson 6. 

6. Keep the default Validation Logic settings. 

The Common Folder Redirection dialog box should look like the 
following: 



Common Folder Redirection Setliirig^ 



Common Desktop 



r Redirect'tb folder r " ^ ; i ^> j'^'^' 



SACommon Desktop 



pValidatipri£6gie.= 



; Group Membership |p [ 



0 Desktop 



-€ohnectibm=Tl 
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Lesson 10: Writing and Implementing Custom Scripts 

Using ScriptLogic's Custom Script Manager, KiXtart scripts can be used to 
provide additional functionality to the wealth of possible configurations that 
ScriptLogic provides. Additional tasks may include specialized registry 
settings, automated software deployment, or dynamic configurations of 
software or registry settings based on the current user. 

Custom scripts may be a handwritten section of code that is pertinent to your 
specific environment or a script that has been shared with the public com- 
munity. Scripts can be downloaded from a number of different sources. For 
more detail on obtaining custom scripts, refer to the custom script section in 
the Administrator's Guide. 

The first custom script that we will implement for ACME is a script that has 
been shared with the public and can be downloaded from ScriptLogic's web 
site using the following link: 

http://www.scriptloqic.com/support/customscripts/C1020.asp 

This script is numbered C1020. It will dynamically configure the document 
properties (User Full Name, Initials, and Company) of Word 97/2000 based 
on the user logging on to the machine. 

►To add this script to ScriptLogic's logon repertoire, we will use the Custom 
Script Manager. 

1. Press the Custom Scripting button from the ScriptLogic Manager's 

main dialog box. 

2. Select the Post-Engine Scripts tab. 

3. Press the Add button, 

4. Enter the location and name of the script to execute. Optionally, press 
the Script selection button to locate the script. For script C1020, enter 
\\Reagan\Program Files\ScriptLogic Manager\SLScripts\C1020,kix. 

The contents of C1020.kix contain the following KiXtart script code: 

Update. MS Office;8T. 0 or/ 9,0' sV Common Userfnfo [Begin], * 
>; ThefMS">ori User Info ik/s'tored in. the regis try=^'as"jUni code 
, This, routine .basi'caaiy^'xnterleaves. stringsi with ''Op ^ - - ^ 
r sinbrating.^the Uni code' equivalent of -US -English. ' / T/ . 

**' Do not>:us>l tfii*s^ routine* on localized OS Versions, other ' -* 
;..tlian' US-'Engrish./*,*'^' , " ' - ^ 

r Tlie Use'r/,s E^ullTNeune^ will be extracted from DMD. 

; The* User's (3) Initials will , be' extracted' from? UMD' s. < - I 

Description Field, ' ^ . - 

; provided they are precededv^.with a pounds symbol somewhere-, - , 
; in the Description , \ ^ > - ^ ^ ^ ' 

field. Example of Description Field' in^UMD: [Network^^' 
< ; Administrator #ABC 3; ' , . < ^ - 

r'The User? s -Compai^ needs toV be' supptl'iedXon the*;]next|,l^ine. ' ' 
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.$Gompany= ' ACME Corporation - New Yorlc'" ' . v . - ^ 

if existkey(*$HKC0SM\Office/)*Or ..1 : v ' ; 

$x=r \ /■ • • ■ v-, • V ^ 

. $RegExp=' ' - ■ ^ ' . 

while $X<len('"+$Coinpany) +1 

$RegExp=$RegExp+dectohex Case (s\ibstr ($Company, $x; 1)0 ) +^^^ 

. ::$X=$X+:ll . V . -^^ V ■■ r ■ i 

. :loop;V ::- ■ V ■ . ■ • ■ ^ 

$RegExp=$RegExp+' 0000 • . . -t ^ ! 

$RegKey=ii$HKCUSM\Of f ice\9 .0\Cbinmon^UserInfo'^^^^^^r^^^^ I 

if existlceyO$RegKey' ) =0 ' • . I 
$result=writevalue ( *'$RegKey' Company':, ' $RegExp' , 'REG_BINARy' )\ 
endrf 

$RegKey='„$HKCUSM\Of fice\8n0\<:oimnon\UserInfo' ;r Of f ibe- 97 
if existlcey( ^ $RegKey' ) =0 , * / 

$result=writevalue $RegKey' , ' Company' , ' $RegExp' , 'REG^BINARY' )j 

^endif ^ ^ , " ^ ^ 

' $x=l ^ ' ^ ! 

.$RegExp=' ' ■ ^- - » 

while $X<len( *'>$FullName) >l. '\ ' , , . ^ 
$RegExps$RegExp+dectohex (asc ('substr ($FullName, $x, 1) ) ) +' 00 ' 

j$Xa$X+l^ - " o .-.o, J '.-.1 5' , ^ „ ^- ^ - -\ 

loop . " ' : J , ' -J 

' $RegExps$Reg£xp^t!'J^QO^0'' ' 1: * , ^ ^ • ' ^ 

$R'egKey='j$lbcctISM\Office\9..0ACommon\Psei?Info' Office 2000^ * 

> if exiatkey{ *$Regkey' ) aO'^ : . . f ' / t \ ' 

r $ result a writevalue Q $RfegKey:' // UserName ' , ' $RegExp' , ' REG^^BINARY' V 
endif. \ , \t ^ ^ < : ^ . ^ . ^ ' ' , 

/$RegKey=^$HKCUSMVoffice\8..0\Common\UaerInfo'* / Office 97 ' ^ 

> if existkey r^$RegKey' ) =0 - / 
; ; '$ r esul t*= wr i teva lue ( * $ RegKey ' , ' Us erName ' , ' $ RegExp ' ; ' REG_B INARY ' h 
endif ^ . 

if ^$I>nitials< ^ v ^ - , 

$x=l^. ^ . I ^ ' ' -"^ 

$RegExp="' % ^ \ ' ^ \ ^ 

while .$X<len (.* '+$ initials ).+ l; ^\ ' , * ' 

$RegExpa$RegExp+dectohex CascCsTibVtr 0$lnitials „$x, H )') + ' 00 ' 

. ' ' ^$xa$x+r' ^ ' ' * ' ' < V- < " . ^ - , ' ^ 

/.loop^ ^ < ' '.,1' .'^ ' ' ^ \ ' 

$RegExp=$RegExp+-' 0000^''^^ * ^\ / / ' ' 

$RegKey;s' $HKCUSM\Of f ice\9t Oi\Common\UserInfo" ) Office .2000 
, ^.iiE> existkex (c^ $ RegKey ^'):rO . - , " " l ' 

/ : Sresult=wri tevaiue ( *'$RegKey' , ' Userini tials ',, ' $RegExp' , ' REG_BINARY' )t 
; eridif ^ '""^ ' ^.t- ^ " ' ^ \ 

$RegKey=' $HKCUSM\Of fice\&:5ACbmmon\UserInfo' ; Office 97, 
,if " existkey ( * $RegKey' ) =0' . - ^ ; " 

^ ' $result=writevarue (tj $RegKey ' , ' Userlnitials ' , ' $RegExp' , ' REG2BIN3UKr ' h 
endif^ ' - , " . " ' . ^ " . i 

endrf'"" - . ' " ' - 

;endifrti ^\ > ^'"^ ~ \ \ \ " ^ - 

; * Update! MS Office. 8. 6-^ or 9 . 0 '-s ^ Coimdn User Info ['End] ^* ^ 1 
.RETUR» ;\^*fl^^aa^?c^Xine\o£^ filB .--Do^not remove?«^. \ - - • \^rS' '* 
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5. To enter a description of tlie script, press the Description button. Let's 
enter the following for the above script: 

Word 97/2000 Customized User Information settings 

6. We will keep our default Validation Logic settings. 

The Custom Script Data dialog box should look like the following: 



Custom Script Settings 



Script 



\\Reagan\Program Files\ScriptLoglc Manager\SLScripls\C1 02 1 ^tlji^ 



Validation Logic-^^^^ 
I T'vpe 



Valine; 



Group Membership 



F Class — ^ — ^ 

g Deskfo^ 
Wl Notebook 
g'TabletP^G ' ^ 
JJHl^ Tiermvf en\^(Sijeii)t^< 
ITj Member Server; 



PQS; ^ 

^Bj 95 131 NT * 
Ft 98 g20b(Di 

(gf'2003 



P Connection - 
Pi Dial-up ^ 



1"^ 




7. Press the OK button to save the settings for this script. 

Now as each user loads and creates Word documents, their own user 
information including company name as given in the script, full name 
(retrieved from UMD as specified in the script notes) and initials (retrieved 
from UMD as specified in the script notes) will be stored with the document. 

Another very useful custom script is one that enables the network adminis- 
trator to enable and password protect a screen saver for all NTx clients. 
This script (C1021) can be downloaded from the ScriptLogic web site using 
the following link: 

http://www.scriptloqic.com/support/customscripts/C1021.asp 
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^To add this script to ScriptLogic, we will use the Custom Script Manager 
again. 

1. Press the Custom Scripting button from the ScriptLogic Manager's 
main dialog box. 

2. Select the Post-Engine Scripts tab. 

3. Press the Add button. 

4. Enter the location and name of the script to execute. Optionally, press 
the Script selection button to locate the script. For script 01 021, enter 
\\Reagan\Program Files\ScriptLogic Manager\SLScripts\C1021.kix, 

The contents of O1021.kix contain the following KiXtart script code: 

*' Force Screen Saver, settings- for. NT systems [Begin] .* 
; * Allows for different settings for TermServers, Servers and 
; Workstations * 

; * Thii3 will not take effect until the next time the- system is 
; rebooted^, • ' ■' ' ■ • ' 

; * Possible? settings : ^ . 

; * $SsActiVe: l=On/ 0=Off ' 

; * $SsUseP;W: l=Password protected, . 0=No- password^^^ c ^ 
; * $SsWaiIt : ; seconds before screen^^ .i; 
; *• $SsName!: name of screen saver (e.g:;: logons scr)l-i 
if existkey ( $HKIiM+:' XSystemXGurentContrplSetXCpntrolV^^^ 

. . Sierver;'^X=d,.. .. . ■ '- 'rr ' .:q;Q|^P^^^ , ' . ' ^' -"y:'^' . : - X--tv; 

$Termiiia^;is^rver«l: .''^'^ '^"f ■■■^^■;^!p^y-: ■■■■ 

endif ^ : ' ' V /" - ' ■ 

i^. ingroup( ' Domain Users ' ) and^ $OStype=' NT ' ^ : N^i :A , . 

./ $RegKey= ' $HKCU\Contr6il; Eanea\Desktbp,' ' : • 

-select ■ ■• ■ ■ v-" •-; . " 

case. $Termxnal: Server- ' • ■ '■y-h--Mi\'r^.. 

.r .$ssActive=!^'fii' : , .' • '■ ' it 

'■.) .$SsUsePW=.'-l;'' \ 
; $ssWaif;t=':6:o.o-!'' r --i"' ■_/:-^'::'y ^ ■ ■ ■■■ 

"': $SsName= ' logon. scr^*^ --.L-i-^ 
• . -case $NTtype=^':S(Brver.'' • ■■■i^-.y ■ 

$Ss Active 1." : ; • ' \ , ' • ..y }: 

V.'$s^useP^ : . ''''■'■^'^ii-'§^:^:y,u^ ■ :;■■■';^:5:■■S■•^^•; 

$sswait='6oo' :■■ ■ V ■ ■ '■■ 'y-- -;v-.- . 

$ SsName- 'logon .scr' 
case 1 /Workstation ' ; 'I 

[: V $SsActive= ' 1'^ 

$ssusepw=':i' . " ■ ? \ • . ? . . ■ 

, ^ > ■ $SsWad;.ts= V60 01' ^ , I'; " 

• " ^ $SisName= *^logon=:scr:' 
endselect 

$resuit=writevalue (('' $RegKey' , ' ScreenSaveActive V $SsActive' , 'REG^SZ}? ) 
$res\ilt=iwritevalue ( ' $RegKey ' , ' ScreenSaverlsSecure • , • $Ss0sePW' , ' REG^SZl' ) 
$resul tawr i teva;lue (i^l $RegKey ' , ' ScreenSaveTimeOiit r /. ' $ SsWart ,' , ' REG^^SZ 'l 
; $resxLltswritevalue( '$R^Key' , VSCRIsrSAVS'.EXE' •'$bilDlr\$SsName' > 'RBG/iSZU^}; 
endif: • • ■ .V ' • 

; * Force Screen Saver settings for* NT* systems [End] * 
RETURN:; ** Last line of file - Do "'not! remove; f . ; .^v 
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5. Press the Description button and enter a simple description of the 
script. Let's enter the following for the above script: 

Force Screen Saver Settings 

6. We will keep our default Validation Logic settings of Group Membership, 
* (all groups). We can keep our default settings for this script because 
the actual scripting code checks the Group and Operating System to 
confirm the user is a member of the Domain Users Group and their 
operating system is NT. 

The Custom Script Data dialog box should look like the following: 



Custom Script Settings 



: .Script 



|\\Reagan\PrQgiam Fiies^ScriptLogic Manager\SLSc ripts\C102 | 



pValiciation Logics 



Valuei, 



.[Group Membership JT 



pC!ass ^~t|^ 

R Desktop 

§ Noteboop-.^ : 
g-Tablell^t/:f ^ 



-•05== 

'Si 95 g NT 

jgii20gi 



fp- Connection ~ 
j P^: Dial-up 



^Ift^Description 



7. Press the OK button to save the settings for this script. Press the OK 
button again to return to ScriptLogic's main menu. 

Be sure to Save and Replicate these changes when all configurations are 
complete. The settings will take effect the next time each user logs on to the 
network. 

As each Domain User logs onto the network, if they are using an NT operat- 
ing system their screen save options are automatically set. 
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The screen saver used in the custom script may be changed as 
well as the status of the screen saver, password protection, and 

activation time. Simply press the Edit Script button, ^| , and 
the script code will open in the editor specified in the File 
Paths dialog box. 

The final script we will add is an Antivirus script. At one time or another, a 
vinjs is sure to get through your antivirus protection scheme. This script is 
used as your last defense against a possible infection. The script disassoci- 
ates common extensions from Windows Script Host, as well as cleans up 
the VBS.LoveLetter.A and AnnaKournakova viruses, implements patches 
defined in Microsoft's Security Bulletin {MS99-032) among other things. The 
full description of this custom script can be found on the ScriptLogic web 
site. The script number is C1030. 

►To implement this script: 

1 . Download the script from the web site using the following link: 
http://www.scriptloqic,com/ support/customscrlpts/C1030.asp 

2. Click on the above link and download the zip file. Once the file is down- 
loaded, extract the .KIX script file from the zip file. In this example, we 
will extract the file to the \\Reagan\Program Files\ScriptLogic 
Manager\SLScripts share. 

3. Press the Custom Scripting button from the ScriptLogic Manager's 
main dialog box. 

4. Select the Post-Engine Scripts tab. 

5. Press the Add button. 

6. Enter the location and name of the script to execute. Optionally, press 
the Script selection button to locate the script. Enter \\Reagan\Program 
Flles\ScriptLogic ManageASLScripts\C1030.kix. 

7. Enter a simple description of the script in the Description field. Let's 
enter the following for the above script: 

Last Defense - Antivirus 

8. We will keep our default Validation Type setting of Group Membership 
and Value of * (asterisk). We want all users to be protected by this script. 
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The Custom Script Data dialog box sliould look lil<e the following: 



Custom Script Settings 



Script 



\\Reagan\Program F3es\ScriplLogic Manager\SLScripls\C1 03 



fp Validation Logics; 
Type- 



G roup M embership | 



Value- 



r ClaSS --^ ; — ^ 

M Desktop, 
Si Notebook 
@ Tablet PC 

IQl Trefm,5erv/ (Client 
O y ember Ssr^err 



UefcfiKtibn 



pOS 

Bj 95 H NT 
g 98 g 2000^ 

^ B 2003^ 



Connection = 
Ig[LAN 
S Dial-up 



•Cancel 



9. Press the OK button to save the settings for this script. 
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Lesson 11: Assigning Logon Scripts 

Since Shelly does not have access to the master user database (located on 
the ACME-HQ domain), she will have to get Charlie to modify the logon 
script for users of the ACME-NYC resource domain. 

The logon script used by ScriptLogic is called SLOGlC.BAT and can by 
found in the NETLOGON share of the PDC. However, in the Single Master 
Domain model, the PDC that ScriptLogic is installed on is not the same PDC 
that the user database exists on. The PDCs are part of two different do- 
mains. 

The user must be authenticated by the master domain and ScriptLogic must 
execute on the resource domain. What logon script should be used? Since 
ScriptLogic is nonexistent on the Master domain, the SLOGIC logon script 
does not exist. 

In order for these users to execute ScriptLogic, Chariie, the system adminis- 
trator at the company's headquarters must assign a special logon script to 
each user that belongs to the ACME-NYC domain. The logon script he will 
use will be a simple batch file that will be placed in the NETLOGON share of 
the master domain. This special batch file will consist of the following 
commands: 

SL -NYC. BAT 
decho off 

CALL \\REAGAN\NETLOGON\ SLOGIC . BAT 

When a user logs onto the network, they are authenticated by the master 
domain. Once successfully authenticated, the logon script (SL-NYCBAT) is 
executed. The simple logon script calls the ScriptLogic logon script 
{SLOGICSAT) on the resource domain. 




Resource Domain 
ACME-MIA 
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Lesson 12: Replication and Testing 

Now that alt of our configurations have been entered into the ScriptLogic 
Manager, it Is time to replicate and test the configurations. 

You will notice an LED located on the ScriptLogic Manager main dialog box. 
This LED will be either Red, Yellow or Green. If the LED is Red, you must 
save all configuration information. A Yellow LED indicates that all changes 
have been saved, and the data is ready to be replicated. A Green LED 
shows that ail configuration information has been saved and replicated. 

To save the configuration information, press the Save Changes button from 
the ScriptLogic Manager main dialog box. 

To replicate the data, press the Replicate Changes button from the 
ScriptLogic Manager main dialog box. Data will be replicated to all servers 
specified in the Server Manager. 

Once all information is successfully saved and replicated, it is time to test 
the configurations. 

If you find any problems with any of the configurations, go back to the lesson 
that describes the necessary actions and confirm all settings. 
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Summary 




Congratulations! You have completed the tutorial. This advanced tutorial has 
demonstrated how to configure ScriptLogic within a Single Master Domain 
model. We have demonstrated several common configurations to show you 
how to configure them within this domain model. 
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Appendix A - Tutorial Features 



The chart below details ScriptLogic features that can be found in the Case 
Study's. Several of the features are demonstrated in more than one tutonal 
but based on the tutorial's own context. 



Tutorial 1 Tutorial 2 Tutorial 3 



Prof He Options 








Logging 








Alerts 








Default VaHdatlon Lo<5lc 


✓ 


✓ 


■/ 


Preferences 








Default Odscriptlon 




/ 


•/ 


Replication Rflanager Setup 




/ 


•/ 


Service fiffanaaer Setup 




/ 


■/ 


Assicin Logon Script 


✓ 


/ 


-/ 


Orive Mapping 








Public Shared Drive 






■/ 


Group Shared Drive 








Home Directories {Root Map) 






✓ 


PHnter Mappms 


✓ 


✓ 




Mail Profiles ^ 




✓ 


✓ 


EnvtrQiiment Variables 








Search Paths 








Shortcuts 








Internet Settmgs 








Default Startup Page 








Defauit Download Directory 








Poor yans Proxy 




✓ 




AutoShare 




✓ 




I^S Office Default Paths 






✓ 


Application Launcher 








Regishry 




✓ 




Security Policy 




/ 




Instate Service Pack 




/ 




Le«al Notice 




✓ 




Custom Logon Logo 




✓ 




Adding a New Domain Controller 








Profile Options 








Time Synchronization ^ 








fi/lessage Box 








Common Fotder Redirection 








Custom Scripts 






✓ 




Index 
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